apache / apache/pulsar

Facing this issue while using authentication with TLS

Open
#15,351 14 comments 0 reactions 0 assignees View on GitHub
Stale type/bug
Dominant language
Java
Stars
15.3k
Forks
3.8k
Avg merge
1d 14h
Merged PRs (30d)
160

Description

I followed all the steps mentioned in https://pulsar.apache.org/docs/en/security-tls-transport/ and https://pulsar.apache.org/docs/en/security-tls-authentication/ to use authentication using TLS but somehow whenever I make config changes and restart, broker containers get excited. while trying to look into the logs, I see following errors:

1. org.apache.pulsar.common.util.FileModifiedTimeUpdater - Unable to fetch lastModified time for file ca.cert.pem:
java.nio.file.NoSuchFileException: /ca.cert.pem (address is correct but facing this error for all 3 certificates)

2. org.apache.pulsar.common.util.SslContextAutoRefreshBuilder - Execption while trying to refresh ssl Context Certificate loading error
java.security.KeyManagementException: Certificate loading error

3. Will not attempt to authenticate using SASL (unknown error)

4. ERROR org.apache.pulsar.broker.PulsarService - java.lang.NullPointerException

I was expecting this to run fine but couldn,t find any solution on internet. If you could help me with what could be the issue, it'll be really helpful. I have generated certificate from openSSL as mentioned in the documentation for apache pulsar.

Contributor guide

Open the contributing guide

Research direction

Start by comparing the broker configuration with the TLS transport and TLS authentication documentation linked in the issue, then verify that ca.cert.pem and the other certificate paths exist inside the broker containers. Review the FileModifiedTimeUpdater, SslContextAutoRefreshBuilder, SASL, and PulsarService errors together. Done means the broker restarts without certificate-loading or NullPointerException errors and authentication succeeds.

Written by the indexing model from the issue text.

Assessment

Tech stack
java
Domain
authentication, backend, security
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
25/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.