Have you seen this thread ? http://search-hadoop.com/m/Kafka/uyzND1aC37obDa1W1?subj=Re+advertised+listeners
On Tue, Apr 3, 2018 at 12:28 AM, Eduard <edu...@nestlogic.com> wrote: > Hey! > > I've configured SSL for client connection and it does not work for me: > > My configuration: > > listeners=PLAINTEXT://0.0.0.0:7032,SSL://0.0.0.0:9093 > security.inter.broker.protocol=PLAINTEXT > ssl.client.auth=required > > ssl.truststore.location=/home/ec2-user/kafka/config/kafka.se > rver.truststore.jks > ssl.truststore.password=mypassword > ssl.keystore.location=/home/ec2-user/kafka/config/kafka.serv > er.keystore.jks > ssl.keystore.password=mypassword > ssl.key.password=mypassword > advertised.listeners=PLAINTEXT://someaddress:9092,SSL://someaddress:9093 > ssl.enabled.protocols=TLSv1.1 > > When using openssl client I get following error: > 139654442704832:error:1408F10B:SSL routines:ssl3_get_record:wrong version > number:ssl/record/ssl3_record.c:252: > > Both kafka consumer and producer work using plaintext on port 9092 but > don't work using SSL on 9093 port both from local machine and from remote >