# Confluent CLI error

**URL:** <https://forum.confluent.io/t/confluent-cli-error/7210>\
**Category:** Clients\
**Created:** [10 February 2023 12:41 UTC](https://forum.confluent.io/t/confluent-cli-error/7210 "2023-02-10T12:41:46Z")\
**Posts on this page:** 6\
**Page:** 1

<div class="post-metadata">

**Author:** ![sang\_jena](https://avatars.discourse-cdn.com/v4/letter/s/d6d6ee/32.png) [@sang\_jena](https://forum.confluent.io/u/sang_jena)\
**Post date:** [10 February 2023 12:41 UTC](https://forum.confluent.io/t/confluent-cli-error/7210/1 "2023-02-10T12:41:46Z")

</div>

Hi Team,

I am trying to use Confluent CLI to post some messages into demo topic but i am getting this error-

Error: failed to obtain topics from client: API key may not be provisioned yet  
%3|1676032533.888|FAIL|Confluent-CLI\_v3.1.0#consumer-1| [thrd:sasl\_ssl://pkc-l7pr2.ap-south-1.aws.confluent.cloud:9092/bootst]: sasl\_ssl://pkc-l7pr2.ap-south-1.aws.confluent.cloud:9092/bootstrap: SSL handshake failed: SSL transport error: Unknown error (after 27ms in state SSL\_HANDSHAKE)  
%3|1676032534.739|FAIL|Confluent-CLI\_v3.1.0#consumer-1| [thrd:sasl\_ssl://pkc-l7pr2.ap-south-1.aws.confluent.cloud:9092/bootst]: sasl\_ssl://pkc-l7pr2.ap-south-1.aws.confluent.cloud:9092/bootstrap: SSL handshake failed: SSL transport error: Unknown error (after 25ms in state SSL\_HANDSHAKE, 1 identical error(s) suppressed)

I have followed the instructions in the demo tutorial in setting up the cluster and demo topic.  
The other commands like  
confluent kafka cluster list  
confluent kafka topic list  
are working fine but only when i am trying to post the messages into the topic or consume from it i am getting the error.

On the day i set up the cluster and topic everything was working fine but the following day the posting to topic and consuming from it is throwing error.

Any help or clue will be highly appreciated

---

<div class="post-metadata">

**Author:** ![ronaldpaul](https://avatars.discourse-cdn.com/v4/letter/r/ecccb3/32.png) [@ronaldpaul](https://forum.confluent.io/u/ronaldpaul)\
**Post date:** [5 July 2023 13:49 UTC](https://forum.confluent.io/t/confluent-cli-error/7210/2 "2023-07-05T13:49:57Z")

</div>

Same error here. Kindly help.

confluent kafka topic consume --from-beginning poems

%3|1688563525.662|FAIL|Confluent-CLI\_v3.20.0#consumer-1| [thrd:sasl\_ssl://pkc-p11xm.us-east-1.aws.confluent.cloud:9092/bootstr]: sasl\_ssl://pkc-p11xm.us-east-1.aws.confluent.cloud:9092/bootstrap: SASL authentication error: Authentication failed (after 5557ms in state AUTH\_REQ)  
Error: failed to obtain topics from client: API key may not be provisioned yet

---

<div class="post-metadata">

**Author:** ![dataknitter](https://sea1.discourse-cdn.com/flex019/user_avatar/forum.confluent.io/dataknitter/32/3100_2.png) [@dataknitter](https://forum.confluent.io/u/dataknitter)\
**Post date:** [9 July 2023 07:42 UTC](https://forum.confluent.io/t/confluent-cli-error/7210/3 "2023-07-09T07:42:37Z")

</div>

Hi! I had the same problem and found that I could make it work if I submitted the API key and secret explicitly like so :

confluent kafka topic consume --from-beginning poems --api-key YOUR\_API\_KEY\_FROM\_EARLIER\_STEP --api-secret API\_SECRET\_FROM\_ABOVE

No idea why this is happening, though, and doing it this way is not very convenient.

---

<div class="post-metadata">

**Author:** ![chaoscreater](https://avatars.discourse-cdn.com/v4/letter/c/b5e925/32.png) [@chaoscreater](https://forum.confluent.io/u/chaoscreater)\
**Post date:** [22 July 2023 10:59 UTC](https://forum.confluent.io/t/confluent-cli-error/7210/4 "2023-07-22T10:59:08Z")

</div>

works for me as well, thanks!

---

<div class="post-metadata">

**Author:** ![mickey428](https://sea1.discourse-cdn.com/flex019/user_avatar/forum.confluent.io/mickey428/32/3133_2.png) [@mickey428](https://forum.confluent.io/u/mickey428)\
**Post date:** [27 July 2023 08:12 UTC](https://forum.confluent.io/t/confluent-cli-error/7210/5 "2023-07-27T08:12:06Z")

</div>

The above solution worked for me Thanks!! I remember using a past version of the CLI from about 6 months ago and didn’t run into this issue. Is this a newer bug. Is it being tracked?

---

<div class="post-metadata">

**Author:** ![patrick.shimabukuro](https://avatars.discourse-cdn.com/v4/letter/p/a698b9/32.png) [@patrick.shimabukuro](https://forum.confluent.io/u/patrick.shimabukuro)\
**Post date:** [26 August 2023 14:24 UTC](https://forum.confluent.io/t/confluent-cli-error/7210/6 "2023-08-26T14:24:58Z")

</div>

I’m also having the same problem. Is there any solution yet??

%3|1693059289.125|FAIL|Confluent-CLI\_v3.30.0#consumer-1| [thrd:sasl\_ssl://pkc-6ojv2.us-west4.gcp.confluent.cloud:9092/bootstra]: sasl\_ssl://pkc-6ojv2.us-west4.gcp.confluent.cloud:9092/bootstrap: SSL handshake failed: error:1416F086:SSL routines:tls\_process\_server\_certificate:certificate verify failed: broker certificate could not be verified, verify that ssl.ca.location is correctly configured or root CA certificates are installed (brew install openssl) (after 227ms in state SSL\_HANDSHAKE)

%3|1693059289.155|FAIL|Confluent-CLI\_v3.30.0#consumer-1| [thrd:sasl\_ssl://pkc-6ojv2.us-west4.gcp.confluent.cloud:9092/bootstra]: sasl\_ssl://pkc-6ojv2.us-west4.gcp.confluent.cloud:9092/bootstrap: SSL handshake failed: error:1416F086:SSL routines:tls\_process\_server\_certificate:certificate verify failed: broker certificate could not be verified, verify that ssl.ca.location is correctly configured or root CA certificates are installed (brew install openssl) (after 24ms in state SSL\_HANDSHAKE, 1 identical error(s) suppressed)

Error: failed to obtain topics from client: API key may not be provisioned yet
