oscerd commented on issue #1610: URL: https://github.com/apache/camel-kafka-connector/issues/1610#issuecomment-6632189466
Sorry this thread ended without a working answer: on 4.22.x camel-https-kafka-connector can do mutual TLS with configuration only, and since every connector task has its own Camel context, different connectors can use different keystores. The simplest way is Camel's global SSL settings plus the component flag: ```properties camel.ssl.enabled=true camel.ssl.keyStore=file:/path/to/client.p12 camel.ssl.keystorePassword=<password> # add camel.ssl.trustStore / camel.ssl.trustStorePassword if the server certificate is not trusted by the JVM camel.component.https.useGlobalSslContextParameters=true ``` Alternatively you can build the object yourself and reference it from the endpoint option: ```properties camel.beans.mySsl=#class:org.apache.camel.support.jsse.SSLContextParameters camel.beans.mySsl.keyManagers=#class:org.apache.camel.support.jsse.KeyManagersParameters camel.beans.mySsl.keyManagers.keyPassword=<password> camel.beans.mySsl.keyManagers.keyStore=#class:org.apache.camel.support.jsse.KeyStoreParameters camel.beans.mySsl.keyManagers.keyStore.resource=file:/path/to/client.p12 camel.beans.mySsl.keyManagers.keyStore.password=<password> camel.beans.mySsl.keyManagers.keyStore.type=PKCS12 camel.sink.endpoint.sslContextParameters=#mySsl ``` The `camel.ssl.*` options are described on https://camel.apache.org/components/next/others/main.html, and the OAuth2 (`camel.sink.endpoint.oauth2*`), timeout and `camel.component.https.cookieManagementDisabled` options asked about later in this thread are listed on https://camel.apache.org/camel-kafka-connector/next/reference/connectors/camel-https-kafka-sink-connector.html (keeping the passwords in a Kafka Connect config provider is a good idea). Closing this as answered; if something does not work on 4.22.x, please open a new issue with the version, the configuration (without secrets) and the stack trace. --- _Claude Code on behalf of Andrea Cosentino_ -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
