[KAFKA-8276] Schema Registry Security settings as Props

• Type: Improvement
• Status: Resolved
• Priority: Major
• Resolution: Invalid
• Affects Version/s: 1.0.0, 2.0.0, 2.2.0
• Fix Version/s: 1.0.0, 1.0.1, 1.1.0, 2.0.0, 2.1.0, 2.2.0, 2.1.1
• Component/s: clients
• Assignee: Unassigned
• Reporter: Karthik Murugesan
• Created: 22/Apr/19 16:40
• Updated: 14/Mar/22 22:51
• Resolved: 14/Mar/22 22:51

Description

Take Schema Registry Security properties from the Properties File for C3, and from the Producer/Consumer Properties instead of setting it as JVM Props (-Djavax.net.ssl.*). This forces devs to import the certs to the cacerts of jvm keystore.

confluent.controlcenter.schema.registry.url=https:/schema.registry.local.com:8081
confluent.controlcenter.schema.registry.security.protocol=SSL
confluent.controlcenter.schema.registry.ssl.keystore.location=/var/private/ssl/Keystore.jks
confluent.controlcenter.schema.registry.ssl.keystore.password=****
confluent.controlcenter.schema.registry.ssl.truststore.location=/var/private/ssl/Truststore.jks
confluent.controlcenter.schema.registry.ssl.truststore.password=****
confluent.controlcenter.schema.registry.ssl.key.password=****