SSL encrypted connection
When the cluster has client encryption enabled, configure the SSL keys and certificates for the DataStax Apache Pulsar™ Connector.
| SSL encryption settings are configured in the Client-to-node encryption options. See Configuring SSL. |
You cannot use this option if specifying the cloud.secureConnectBundle option for connecting to a DataStax Astra database. If you are using the cloud.secureConnectBundle, ALL subproperties under ssl: must be empty.
|
Parameters
ssl:
provider: None
cipherSuites:
hostnameValidation: true
keystore:
password:
path:
truststore:
password:
path:
openssl:
keyCertChain:
privateKey:- provider
-
SSL provider to use, if any. Valid choices:
-
None
-
JDK
-
OpenSSL
Defaults to None
-
- hostnameValidation
-
Whether to validate node hostnames when using SSL.
Defaults to true
- cipherSuites
-
The cipher suites to enable.
Defaults to none, resulting in a "minimal quality of service" according to JDK documentation.
- keystore: password
-
Keystore password.
- keystore: path
-
Path to the keystore file.
- openssl: keyCertChain
-
Path to the SSL certificate file, when using OpenSSL.
- openssl: privateKey
-
Path to the private key file, when using OpenSSL.
- truststore: password
-
Truststore password.
- truststore: path
-
Path to the truststore file.
Using a base64 encoded file
For keystore.path, truststore.path, openssl.privateKey, and openssl.keyCertChain you can encode the target file using the standard base64 tool, include it directly in the Pulsar configuration file, and the Pulsar function framework will take care of deploying it to additional Pulsar machines:
base64 -i trust-store-keyAdd the output of the command to truststore: path::
truststore:
path: base64:UEsDBBQACAAIADmJJ1IAAAAAAAAAAAAAAAAGAAkAY2EuY3J0VVQFAAFeQPdfZJTJjvI4HMTveYq5t0bZoTl8Bzt2giEOOGQh3Mi+sgVw4qcf0a25zPj2L0s/VUml+vvzIHaI95eF/YDYxAIB/lElSgi2kGWBt1UBTiCoiAUvIUcs2WyvJ1K/Mw8w7EIGeHVmkyXABlZeBEESgD4KJMpGbrEERYwRzDeIBTikkDhADTGcqBtq9it3cMW0qc4GPOEA7H8B18DCfi3ljh3kjm1QZnAEfkAu5hFKnZV6QvaeYuUHBibPSTT8OsWblmqbJgm6pzfQWaKNo......