Juan Olivares created KAFKA-8535: ------------------------------------ Summary: Kafka Performance Producer broken for SSL when CN is not hostname Key: KAFKA-8535 URL: https://issues.apache.org/jira/browse/KAFKA-8535 Project: Kafka Issue Type: Bug Affects Versions: 2.2.1 Reporter: Juan Olivares
We have SSL client auth enabled in our Kafka servers. Our certificates CN is not the hostname so we cannot use the default {{ssl.endpoint.identification.algorithm=https}}. According to the doc there's the workaround of setting {{ssl.endpoint.identification.algorithm}} to an empty string. It works ok for `kafka-console-producer`. However it fails for `kafka-producer-perf-test` as the underlying class does not allow empty properties: https://github.com/apache/kafka/blob/trunk/tools/src/main/java/org/apache/kafka/tools/ProducerPerformance.java#L95 {code:java} for (String prop : producerProps) { String[] pieces = prop.split("="); if (pieces.length != 2) throw new IllegalArgumentException("Invalid property: " + prop); props.put(pieces[0], pieces[1]); } {code} -- This message was sent by Atlassian JIRA (v7.6.3#76005)