DZone

It’s been a long time waiting but it’s finally here: starting with Apache Kafka 2.7, it’s now possible to use TLS certificates in PEM format with brokers and Java clients. So, why does it matter?

PEM is a scheme for encoding x509 certificates and private keys as Base64 ASCII strings. This makes it easier to handle your certificates. You can simply provide keys and certificates to the app as string parameters (e.g. through environment variables). This is especially useful if your applications are running in containers, where mounting files to containers makes the deployment pipeline a bit more complex. In this post, I’ll show you two ways to use PEM certificates in Kafka.

Source: DZone