management.jmxremote.authenticate=false #wrapper.java.additional.n=-Dcom.sun.management.jmxremote.ssl=false # Uncomment to enable YourKit profiling #wrapper.java.additional.n=-Xrunyjpagent # Uncomment │ false │ Default "false" SSL/TLS certificate check │ true │ Explicit org.ops4j step is to create a keystore containing a server certificate. For instance the following command creates a keystore with a self- signed certificate: Now, we can enable and configure the HTTPs connector

Security (SSL) #security.protocol=SSL # SSL truststore location (Kafka broker) and password #ssl.truststore.location=${karaf.etc}/keystores/keystore.jks #ssl.truststore.password=karaf # SSL keystore (if is required) #ssl.keystore.location=${karaf.etc}/keystores/clientstore.jks #ssl.keystore.password=karaf #ssl.key.password=karaf # (Optional) SSL provider (default uses the JVM one) #ssl.provider= # (Optional) (Optional) SSL Cipher suites #ssl.cipher.suites= # (Optional) SSL Protocols enabled (default is TLSv1.2,TLSv1.1,TLSv1) #ssl.enabled.protocols=TLSv1.2,TLSv1.1,TLSv1 The configuration is similar to the

Security (SSL) #security.protocol=SSL # SSL truststore location (Kafka broker) and password #ssl.truststore.location=${karaf.etc}/keystores/keystore.jks #ssl.truststore.password=karaf # SSL keystore (if is required) #ssl.keystore.location=${karaf.etc}/keystores/clientstore.jks #ssl.keystore.password=karaf #ssl.key.password=karaf # (Optional) SSL provider (default uses the JVM one) #ssl.provider= # (Optional) (Optional) SSL Cipher suites #ssl.cipher.suites= # (Optional) SSL Protocols enabled (default is TLSv1.2,TLSv1.1,TLSv1) #ssl.enabled.protocols=TLSv1.2,TLSv1.1,TLSv1 # (Optional) SSL Truststore type (default

management.jmxremote.authenticate=false #wrapper.java.additional.n=-Dcom.sun.management.jmxremote.ssl=false # Uncomment to enable YourKit profiling #wrapper.java.additional.n=-Xrunyjpagent # Uncomment LdapCtxFactory ssl If "true" or if the protocol on the connection.url is ldaps, an SSL connection will be used ssl.provider The provider name to use for SSL ssl.protocol The protocol name to use for SSL (SSL for for example) ssl.algorithm The algorithm to use for the KeyManagerFactory and TrustManagerFactory (PKIX for example) ssl.keystore The key store name to use for SSL. The key store must be deployed using

interface: Finally, you can also enable security transport on the cluster. Two modes are supported: * SSL: • Symmetric Encryption: Cellar provides additional discovery mechanisms, See Discovery Service (jclouds manipulation commands. 10.10.1.* <ssl enabled="true"/> 3