Loading JDBC CA Certs

• File should have certificates starting with: -----BEGIN CERTIFICATE-----

• Public certificates can contain the public key, information about the entity (e.g. server or user), and the digital signature of the Certificate Authority (CA) to verify the authenticity of the certificate.

1. On the Data Discovery menu, navigate to your chosen worker node's details screen.

2. In the Configurations tab, paste both certificates in the Client Certificates field under the Security settings section.

   
   
   

   The input should resemble the following:

   CODECopy

   -----BEGIN CERTIFICATE----- 2 //content 3 -----END CERTIFICATE----- 4 -----BEGIN CERTIFICATE----- 5 //content 6 -----END CERTIFICATE-----

   -----BEGIN CERTIFICATE-----
   2 //content
   3 -----END CERTIFICATE-----
   4 -----BEGIN CERTIFICATE-----
   5 //content
   6 -----END CERTIFICATE-----

3. Ensure that you save the worker node configuration and update the worker node to enact the changes.

Credentials do not need to have the path for the certificates since they are uploaded on the path, /opt/java/openjdk/lib/security/cacerts, which is the standard location where Java applications look for certificates when required.

Ensure the credential is requesting the usage of SSL properly.

{
    "connectionUrl": "jdbc:apachekafka:AuthScheme=SSLCertificate;UseSSL=true;BootStrapServers=
{KAFKA_CLUSTER_URL}:9093;SSLClientCertPassword={passwordClientCert};SSLServerCertPassword=
{passwordServerCert};",
"driver_class_name": "cdata.jdbc.apachekafka.ApacheKafkaDriver"
}

{
    "connectionUrl": "jdbc:mysql://localhost:3306?
useSSL=true&trustServerCertificate=false&verifyServerCertificate=true&sslMode=verify-full",
    "user": "root",
    "password": "rootpassword"
}