SSL encrypted connection

When the cluster has client encryption enabled, configure the SSL keys and certificates for the DataStax Apache Pulsar™ Connector.

SSL encryption settings are configured in the Client-to-node encryption options. See Configuring SSL.

You cannot use this option if specifying the cloud.secureConnectBundle option for connecting to a DataStax Astra database. If you are using the cloud.secureConnectBundle, ALL subproperties under ssl: must be empty.

Parameters

ssl:
  provider: None
  cipherSuites:
  hostnameValidation: true
  keystore:
    password:
    path:
  truststore:
    password:
    path:
  openssl:
    keyCertChain:
    privateKey:

provider

SSL provider to use, if any. Valid choices:

None
JDK
OpenSSL

Defaults to None

hostnameValidation: Whether to validate node hostnames when using SSL.

Defaults to true

cipherSuites: The cipher suites to enable.

Defaults to none, resulting in a "minimal quality of service" according to JDK documentation.

keystore: password: Keystore password.

keystore: path: Path to the keystore file.

openssl: keyCertChain: Path to the SSL certificate file, when using OpenSSL.

openssl: privateKey: Path to the private key file, when using OpenSSL.

truststore: password: Truststore password.

truststore: path: Path to the truststore file.

Using a base64 encoded file

For keystore.path, truststore.path, openssl.privateKey, and openssl.keyCertChain you can encode the target file using the standard base64 tool, include it directly in the Pulsar configuration file, and the Pulsar function framework will take care of deploying it to additional Pulsar machines:

base64 -i trust-store-key

Add the output of the command to truststore: path::

truststore:
  path: base64:UEsDBBQACAAIADmJJ1IAAAAAAAAAAAAAAAAGAAkAY2EuY3J0VVQFAAFeQPdfZJTJjvI4HMTveYq5t0bZoTl8Bzt2giEOOGQh3Mi+sgVw4qcf0a25zPj2L0s/VUml+vvzIHaI95eF/YDYxAIB/lElSgi2kGWBt1UBTiCoiAUvIUcs2WyvJ1K/Mw8w7EIGeHVmkyXABlZeBEESgD4KJMpGbrEERYwRzDeIBTikkDhADTGcqBtq9it3cMW0qc4GPOEA7H8B18DCfi3ljh3kjm1QZnAEfkAu5hFKnZV6QvaeYuUHBibPSTT8OsWblmqbJgm6pzfQWaKNo......

Was this helpful?

Edit this page