Configuring Journey Engine with Kafka SASL_SSL

  1. Update Journey Engine log4j2.xml file from <JOURNEY_HOME>/Engine/conf/ directory.

    Uncomment the following lines in log4j2.xml.

    <Property name="sasl.mechanism">${sys:sasl.mechanism}</Property> 
<Property name="security.protocol" >${sys:security.protocol}</Property> 
<Property name="ssl.truststore.location" >${sys:ssl.truststore.location}</Property>
<Property name="ssl.truststore.password">${sys:ssl.truststore.password}</Property> 
<Property name="ssl.keystore.location">${sys:ssl.keystore.location}</Property> 
<Property name="ssl.keystore.password">${sys:ssl.keystore.password}</Property>         
<Property name="ssl.key.password">${sys:ssl.key.password}</Property> 
<Property name="ssl.endpoint.identification.algorithm">${sys:ssl.endpoint.identification.algorithm}</Property>
  2. Update the following journey_engine_master.config from <JOURNEY_HOME>/Engine/ directory.

    Update the following property values.

    kafka.security.enabled=Y
kafka.security.protocols.enabled=SASL_SSL 
ssl.truststore.location=/PATH/kafka.client.truststore.jks 
ssl.truststore.password=<ENCYPTED PASSWORD WITH JOURNEY ENCRYPTION TOOL> 
ssl.keystore.location=/PATH/kafka.client.keystore.jks 
ssl.keystore.password=<ENCYPTED PASSWORD WITH JOURNEY ENCRYPTION TOOL> 
ssl.key.password=<ENCYPTED PASSWORD WITH JOURNEY ENCRYPTION TOOL> 
ssl.endpoint.identification.algorithm= 
java.security.auth.login.config=/PATH/kafka_client_jaas.conf