...
This section explains how to generate a self-signed key and certificate for MC2 Kafka Service. If a certificate and key signed by a Certicate Authority are available follow the Java keytool documentation to add the key and certificate to estar/tpe/dynamic/mc2/private/kafkaservice/server.keystore.jks. You can use same key and certificate for both Kafka Service and MC2 Service/Pyruleservice.
Generate a self-signed certificate
cd estar/tpe/dynamic/mc2
mkdir -p private
...
7. On each app server node open cfg/db_connection.ini file and add the following sections:
| Code Block | ||
|---|---|---|
| ||
[kafkaservice_key]
DBType=
DBName=kafkaservice_key
EstarName=kafkaservice_key
Credfile=estar/tpe/dynamic/mc2/private/kafkaservice/epasswd
[kafkaservice_keystore]
DBType=
DBName=kafkaservice_keystore
EstarName=kafkaservice_keystore
Credfile=estar/tpe/dynamic/mc2/private/kafkaservice/epasswd
[kafkaservice_truststore]
DBType=
DBName=kafkaservice_truststore
EstarName=kafkaservice_truststore
Credfile=estar/tpe/dynamic/mc2/private/kafkaservice/epasswd
|
8. On each app server node edit the estar/tpe/cfg/kafkaservice/kafka-service.yml - create this file if it does not exist. Add to this file the following parameters:
| Code Block | ||
|---|---|---|
| ||
eagle.enable.ssl: true
eagle.kafka.instance.kafkaBrokerConfigs:
ssl.client.auth: required |
9. Restart MC2 Kafka service:
...
estar/tpe/dynamic/mc2/private/kafka_ssl_client/client.keystore.jks
Generate a self-signed certificate
cd estar/tpe/dynamic/mc2
mkdir -p private
...
9. On each app server node open cfg/db_connection.ini file and add the following sections:
| Code Block | ||
|---|---|---|
| ||
[mc2ejmkey]
DBType=
DBName=mc2ejmkey
EstarName=mc2ejmkey
Credfile=estar/tpe/dynamic/mc2/private/kafka_ssl_client/epasswd
[mc2ejmkeystore]
DBType=
DBName=mc2ejmkeystore
EstarName=mc2ejmkeystore
Credfile=estar/tpe/dynamic/mc2/private/kafka_ssl_client/epasswd
[mc2ejmtruststore]
DBType=
DBName=mc2ejmtruststore
EstarName=mc2ejmtruststore
Credfile=estar/tpe/dynamic/mc2/private/kafka_ssl_client/epasswd
[mc2pykafka]
DBType=
DBName=mc2pykafka
EstarName=mc2pykafka
Credfile=estar/tpe/dynamic/mc2/private/kafka_ssl_client/epasswd
|
10. On one of the app servers edit the estar/tpe/dynamic/mc2/cfg/extractservice.yml file - this file is on a shared location and will affect all MC2 Extract Service instances. Create this file if it does not exist. The file should have the following parameters set at the beginning of the file:
| Code Block | ||
|---|---|---|
| ||
eagle.kafka.camel.defaultCfg.connectionParameters.securityProtocol: SSL |
In the extractservice-lb section the following parameter should be set:
...