Skip to content

Commit 10ed8a0

Browse files
authored
Improved Correctness score
Improved Correctness score
1 parent d4f8c19 commit 10ed8a0

File tree

1 file changed

+10
-11
lines changed

1 file changed

+10
-11
lines changed

articles/hdinsight/kafka/apache-kafka-ssl-encryption-authentication.md

Lines changed: 10 additions & 11 deletions
Original file line numberDiff line numberDiff line change
@@ -4,10 +4,10 @@ description: Set up TLS encryption for communication between Kafka clients and K
44
ms.service: hdinsight
55
ms.topic: how-to
66
ms.custom: hdinsightactive
7-
ms.date: 02/20/2024
7+
ms.date: 04/08/2024
88
---
99

10-
# Set up TLS encryption and authentication for Non ESP Apache Kafka cluster in Azure HDInsight
10+
# Set up TLS encryption and authentication for Non-ESP Apache Kafka cluster in Azure HDInsight
1111

1212
This article shows you how to set up Transport Layer Security (TLS) encryption, previously known as Secure Sockets Layer (SSL) encryption, between Apache Kafka clients and Apache Kafka brokers. It also shows you how to set up authentication of clients (sometimes referred to as two-way TLS).
1313

@@ -147,24 +147,23 @@ To complete the configuration modification, do the following steps:
147147
148148
1. To Use TLS 1.3 in Kafka
149149
150-
Add follwoing configs to the kafka configs in Ambari
150+
Add following configs to the kafka configs in Ambari
151151
> 1. ssl.enabled.protocols=TLSv1.3
152152
> 1. ssl.protocol=TLSv1.3
153153
> [!Important]
154154
> 1. TLS 1.3 works with HDI 5.1 kafka version only.
155155
> 1. If you use TLS 1.3 at server side, you should use TLS 1.3 configs at client too.
156156
157-
For HDI version 4.0 or 5.0
157+
1. For HDI version 4.0 or 5.0
158158
159159
1. If you're setting up authentication and encryption, then the screenshot looks like
160160

161-
:::image type="content" source="./media/apache-kafka-ssl-encryption-authentication/editing-configuration-kafka-env-four.png" alt-text="Editing kafka-env template property in Ambari four." border="true":::
161+
:::image type="content" source="./media/apache-kafka-ssl-encryption-authentication/editing-configuration-kafka-env-four.png" alt-text="Editing kafka-env template property in Ambari four." border="true":::
162162

163-
1. If you are setting up encryption only, then the screenshot looks like
163+
1. If you're setting up encryption only, then the screenshot looks like
164164
165-
:::image type="content" source="./media/apache-kafka-ssl-encryption-authentication/editing-configuration-kafka-env-four-encryption-only.png" alt-text="Screenshot showing how to edit kafka-env template property field in Ambari for encryption only." border="true":::
165+
:::image type="content" source="./media/apache-kafka-ssl-encryption-authentication/editing-configuration-kafka-env-four-encryption-only.png" alt-text="Screenshot showing how to edit kafka-env template property field in Ambari for encryption only." border="true":::
166166
167-
168167
1. Restart all Kafka brokers.
169168
170169
@@ -219,7 +218,7 @@ These steps are detailed in the following code snippets.
219218
ssl.truststore.location=/home/sshuser/ssl/kafka.client.truststore.jks
220219
ssl.truststore.password=MyClientPassword123
221220
```
222-
1. To Use TLS 1.3 add folloing configs to file `client-ssl-auth.properties`
221+
1. To Use TLS 1.3 add following configs to file `client-ssl-auth.properties`
223222
```config
224223
ssl.enabled.protocols=TLSv1.3
225224
ssl.protocol=TLSv1.3
@@ -297,7 +296,7 @@ The details of each step are given.
297296
cd ssl
298297
```
299298

300-
1. Create client store with signed cert, and import ca cert into the keystore and truststore on client machine (hn1):
299+
1. Create client store with signed cert, and import ca cert into the keystore, and truststore on client machine (hn1):
301300

302301
```bash
303302
keytool -keystore kafka.client.truststore.jks -alias CARoot -import -file ca-cert -storepass "MyClientPassword123" -keypass "MyClientPassword123" -noprompt
@@ -317,7 +316,7 @@ The details of each step are given.
317316
ssl.keystore.password=MyClientPassword123
318317
ssl.key.password=MyClientPassword123
319318
```
320-
1. To Use TLS 1.3 add folloing configs to file `client-ssl-auth.properties`
319+
1. To Use TLS 1.3 add following configs to file `client-ssl-auth.properties`
321320
```config
322321
ssl.enabled.protocols=TLSv1.3
323322
ssl.protocol=TLSv1.3

0 commit comments

Comments
 (0)