# Consumer and Producer SSL Configuration

**URL:** <https://forum.confluent.io/t/consumer-and-producer-ssl-configuration/6949>\
**Category:** Clients\
**Created:** [5 January 2023 09:56 UTC](https://forum.confluent.io/t/consumer-and-producer-ssl-configuration/6949 "2023-01-05T09:56:07Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![hasmine.roldan](https://avatars.discourse-cdn.com/v4/letter/h/8e8cbc/32.png) [@hasmine.roldan](https://forum.confluent.io/u/hasmine.roldan)\
**Post date:** [5 January 2023 09:56 UTC](https://forum.confluent.io/t/consumer-and-producer-ssl-configuration/6949/1 "2023-01-05T09:56:07Z")

</div>

Hi,

Good day!

I tried producing but encountered the error:

```auto
[rhel@kafkanode1 ~]$ /home/rhel/confluent-6.0.5/bin/kafka-console-producer --topic test_topic_1 --producer.config /home/rhel/confluent-6.0.5/etc/kafka/producer.properties --broker-list kafkanode1.localdomain:9092
[2023-01-05 11:53:23,586] WARN The configuration 'producer.ssl.truststore.password' was supplied but isn't a known config. (org.apache.kafka.clients.producer.ProducerConfig)
[2023-01-05 11:53:23,602] WARN The configuration 'producer.ssl.truststore.location' was supplied but isn't a known config. (org.apache.kafka.clients.producer.ProducerConfig)
[2023-01-05 11:53:23,602] WARN The configuration 'producer.ssl.keystore.location' was supplied but isn't a known config. (org.apache.kafka.clients.producer.ProducerConfig)
[2023-01-05 11:53:23,602] WARN The configuration 'producer.security.protocol' was supplied but isn't a known config. (org.apache.kafka.clients.producer.ProducerConfig)
[2023-01-05 11:53:23,602] WARN The configuration 'enable.ssl.certificate.verification' was supplied but isn't a known config. (org.apache.kafka.clients.producer.ProducerConfig)
[2023-01-05 11:53:23,602] WARN The configuration 'producer.ssl.keystore.password' was supplied but isn't a known config. (org.apache.kafka.clients.producer.ProducerConfig)
[2023-01-05 11:53:23,602] WARN The configuration 'producer.ssl.key.password' was supplied but isn't a known config. (org.apache.kafka.clients.producer.ProducerConfig)
[2023-01-05 11:53:23,602] WARN The configuration 'producer.ssl.endpoint.identification.algorithm' was supplied but isn't a known config. (org.apache.kafka.clients.producer.ProducerConfig)
>[2023-01-05 11:53:24,050] ERROR [Producer clientId=console-producer] Connection to node -1 (kafkanode1.localdomain/192.168.1.80:9092) failed authentication due to: SSL handshake failed (org.apache.kafka.clients.NetworkClient)
[2023-01-05 11:53:24,051] WARN [Producer clientId=console-producer] Bootstrap broker kafkanode1.localdomain:9092 (id: -1 rack: null) disconnected (org.apache.kafka.clients.NetworkClient)

```

First my producer.properties is configured like this:

producer.security.protocol=SSL  
producer.ssl.truststore.location=/home/rhel/confluent-6.0.5/ssl/kafka-connect.jks  
producer.ssl.truststore.password=admin123  
producer.ssl.keystore.location=/home/rhel/confluent-6.0.5/ssl/kafka-connect.p12  
producer.ssl.keystore.password=admin123  
producer.ssl.key.password=admin123

Then I removed the producer prefix in my configuration and tried to produce again, and it worked.

security.protocol=SSL  
ssl.truststore.location=/home/rhel/confluent-6.0.5/ssl/kafka-connect.jks  
ssl.truststore.password=admin123  
ssl.keystore.location=/home/rhel/confluent-6.0.5/ssl/kafka-connect.p12  
ssl.keystore.password=admin123  
ssl.key.password=admin123

Saw kafka documentation and consumer. and producer. is required in configuring the ssl. Are my configuration correct?

---

<div class="post-metadata">

**Author:** ![MRabast](https://avatars.discourse-cdn.com/v4/letter/m/97f17d/32.png) [@MRabast](https://forum.confluent.io/u/MRabast)\
**Post date:** [6 January 2023 16:32 UTC](https://forum.confluent.io/t/consumer-and-producer-ssl-configuration/6949/2 "2023-01-06T16:32:19Z")

</div>

ssl.truststore and keystores are create with java keytool.exe  
Hope, you are familiar with it  
and have created it with  
keytool -genkeypair …  
keytool -gencert …  
keytool -importcert  
keytool list kafka-connect.jks