Hi Hamza, TLS for Kafka is not implemented in any significantly different way compared to other TLS-enabled services. A good place to start with is the Apache Kafka documentation:
https://kafka.apache.org/090/documentation.html#security_ssl Apache Kafka kafka.apache.org You’ll find a lot of other resources out there that explain TLS and PKI, it’s not really a topic that can be addressed on the dev mailing list. If you have a specific question on how TLS works in Kafka I’d recommend asking on the user mailing list (us...@kafka.apache.org), but I would strongly recommend reading up on TLS itself first. Kind regards, Jim > On 18 Jul 2023, at 13:00, Hamze HAMZE <hamze.ha...@valeo.com> wrote: > > Hi, > > Can someone explain to me the architecture of how SSL works in Kafka? > The whole truststore and keystore relationship and how it works. > > Thanks in advance! > > -- > *Hamze HAMZE* > Trainee/Apprentice/VIE > +49 (0) 90926032877 > hamze.ha...@valeo.com > > Valeo Schalter und Sensoren GmbH > Valeostrasse 1 - 86650 - Wemding (GERMANY) > [image: valeo] <https://valeo.com/> > [image: linkedin] <https://linkedin.com/company/valeo> [image: twitter] > <https://twitter.com/valeo_group> [image: youtube] > <https://youtube.com/user/ValeoGroup> [image: facebook] > <https://facebook.com/Valeo.Group/> [image: instagram] > <https://instagram.com/valeo_group> > > Sitz der Gesellschaft: 74321 Bietigheim-Bissingen > Handelsregister: Amtsgericht Stuttgart - HRB 301795 > Vorsitzender des Aufsichtsrates: Dr. Andreas Heinrich > Geschäftsführer: Stiv Michael Smudja, Martin Mandry, Pierre-Yves Veltois > > *This e-mail message is intended for the internal use of the intended > recipient(s) only. > The information contained herein is confidential/privileged. Its > disclosure or reproduction is strictly prohibited. > If you are not the intended recipient, please inform the sender > immediately, do not disclose it internally or to third parties and > destroy it. > > In the course of our business relationship and for business purposes > only, Valeo may need to process some of your personal data. > For more information, please refer to the Valeo Data Protection > Statement and Privacy notice available on Valeo.com > <https://www.valeo.com/en/ethics-and-compliance/#principes>* > > -- > *This e-mail message is intended for the internal use of the intended > recipient(s) only. > The information contained herein is > confidential/privileged. Its disclosure or reproduction is strictly > prohibited. > If you are not the intended recipient, please inform the sender > immediately, do not disclose it internally or to third parties and destroy > it. > > In the course of our business relationship and for business purposes > only, Valeo may need to process some of your personal data. > For more > information, please refer to the Valeo Data Protection Statement and > Privacy notice available on Valeo.com > <https://www.valeo.com/en/ethics-and-compliance/#principes>*