How to configure TLS certificates in Kafka Avro SerDes client

[Kartikey-Mishra1]

Hi,

I am trying to produce and consume Kafka messages using the apicurio-registry-avro-serde-kafka package. The schemas that need to be used for serialisation and deserialisation are stored in an Apicurio registry 3.0 server. As the server uses self-signed certificates, I am trying to provide custom ca certificates to the serdes client that can be used to verify the server's certificates when it connects to it using SSL.
But so far I have been unable to find the properties in the serdes client that can be used to specify custom ca certificates.

In the 2.0 SerDes package apicurio-registry-serdes-avro-serde it was possible to provide custom ca certificates by using these properties:

ApicurioClientConfig.APICURIO_REQUEST_TRUSTORE_LOCATION
ApicurioClientConfig.APICURIO_REQUEST_TRUSTORE_PASSWORD
ApicurioClientConfig.APICURIO_REQUEST_TRUSTORE_TYPE

But I haven't been able to find the equivalent of these properties in the 3.0 version of the package.

Can someone please help me in finding these properties in the 3.0 package ?
Thank in advance for your help.

[EricWittmann]

Looking at the code I think we have a regression here (in 3.x). I don't see any configuration options in the new SDK/Client layer that would allow configuration of the trust store. I'll investigate further and see what I can do about this.

I will convert this to an issue, since I am already pretty convinced that we need some changes to the registry to support trust store configs.

[EricWittmann]

New issue here:

• How to configure TLS certificates in Kafka Avro SerDes client #6705