Security (SSL) #security.protocol=SSL # SSL truststore location (Kafka broker) and password #ssl.truststore.location=${karaf.etc}/keystores/keystore.jks #ssl.truststore.password=karaf # SSL keystore (if is required) #ssl.keystore.location=${karaf.etc}/keystores/clientstore.jks #ssl.keystore.password=karaf #ssl.key.password=karaf # (Optional) SSL provider (default uses the JVM one) #ssl.provider= # (Optional) (Optional) SSL Cipher suites #ssl.cipher.suites= # (Optional) SSL Protocols enabled (default is TLSv1.2,TLSv1.1,TLSv1) #ssl.enabled.protocols=TLSv1.2,TLSv1.1,TLSv1 The configuration is similar to the

Security (SSL) #security.protocol=SSL # SSL truststore location (Kafka broker) and password #ssl.truststore.location=${karaf.etc}/keystores/keystore.jks #ssl.truststore.password=karaf # SSL keystore (if is required) #ssl.keystore.location=${karaf.etc}/keystores/clientstore.jks #ssl.keystore.password=karaf #ssl.key.password=karaf # (Optional) SSL provider (default uses the JVM one) #ssl.provider= # (Optional) (Optional) SSL Cipher suites #ssl.cipher.suites= # (Optional) SSL Protocols enabled (default is TLSv1.2,TLSv1.1,TLSv1) #ssl.enabled.protocols=TLSv1.2,TLSv1.1,TLSv1 # (Optional) SSL Truststore type (default

management.jmxremote.authenticate=false #wrapper.java.additional.n=-Dcom.sun.management.jmxremote.ssl=false # Uncomment to enable YourKit profiling #wrapper.java.additional.n=-Xrunyjpagent # Uncomment LdapCtxFactory ssl If "true" or if the protocol on the connection.url is ldaps, an SSL connection will be used ssl.provider The provider name to use for SSL ssl.protocol The protocol name to use for SSL (SSL for for example) ssl.algorithm The algorithm to use for the KeyManagerFactory and TrustManagerFactory (PKIX for example) ssl.keystore The key store name to use for SSL. The key store must be deployed using

management.jmxremote.authenticate=false #wrapper.java.additional.n=-Dcom.sun.management.jmxremote.ssl=false # Uncomment to enable YourKit profiling #wrapper.java.additional.n=-Xrunyjpagent # Uncomment mode │ false │ Default "false" SSL/TLS certificate check │ true │ Explicit org osgi.service.http.secure.enabled=true org.ops4j.pax.web.ssl.keystore=/path/to/keystore org.ops4j.pax.web.ssl.password=foo org.ops4j.pax.web.ssl.keypassword=karaf1234 org.osgi.service.http.enabled=false

interface: Finally, you can also enable security transport on the cluster. Two modes are supported: * SSL: • Symmetric Encryption: Cellar provides additional discovery mechanisms, See Discovery Service (jclouds manipulation commands. 10.10.1.* <ssl enabled="true"/> 3