Create a truststore file to store certificates from the trusted Certificate Authority (CA). Use the truststore file to verify the certificate provided by the server in an SSL connection.
Perform the following steps to create a truststore file that contains the Head certificate:
Open the keystore file, right-click the file alias name, and select
Export
.
Retain the default values and click
OK
.
Save the
.cer
file.
From the Tools menu, click
Import Trusted Certificate
.
The
Import Trusted Certificate
dialog box appears.
Select the
.cer
certificate file that you exported in Step 3.
Confirm the certificate details and click
OK
.
A dialog box appears asking if you want to accept the certificate.
Click
Yes
to trust the certificate and import it.
Otherwise, click
No
to cancel the file import.
The
Trusted Certificate Alias
dialog box appears.
Enter the alias of the new trusted certificate and click
OK
.
The new trusted certificate entry appears in the keystore entries table with the chosen alias name.
In case of multi-broker Kafka, all keypairs for each broker must reside in the same keystore file. Similarly, all head certificates must reside in the same truststore file.