librdkafka has no truststore parameter

[kartikzheng]

fluent-bit logs are output to authenticated kafka, which uses ssl authentication, but librdkafka has no truststore parameter. What should I do?

Configuration for kafka:

listeners=SSL://XXXX:9092
ssl.keystore.location=/data/kafka/ssl/server.keystore.jks
ssl.keystore.password=XXXX
ssl.key.password=XXXX
ssl.truststore.location=/data/kafka/ssl/server.truststore.jks
ssl.truststore.password=XXXX
ssl.endpoint.identification.algorithm=
security.inter.broker.protocol=SSL

[OneCricketeer]

Have you seen this? https://stackoverflow.com/questions/56397039/librdkafka-consumer-and-ssl-configuration

[OneCricketeer]

can not find the truststore parameter.

Because there isn't one... Truststore is only a JVM concept only, not used by OpenSSL

[kartikzheng]

Thank you. How does fluent-bit access ssl authenticated kafka

[OneCricketeer]

It relies on librdkafka, as you've already discovered

https://github.com/edenhill/librdkafka/wiki/Using-SSL-with-librdkafka

[kartikzheng]

Thank you. I'll have a try

[kartikzheng]

Have you had this problem? thank you
[error] [output:kafka:kafka.0] fluent-bit#producer-1: [thrd:app]: fluent-bit#producer-1: ssl://XXX:9092/bootstrap: SSL handshake failed: ssl/record/ssl3_record.c:332: error:1408F10B:SSL routines:ssl3_get_record:wrong version number (after 3ms in state SSL_HANDSHAKE, 30 identical error(s) suppressed)