You are viewing the documentation for the container-native version of IBM Event Streams.
Looking for the managed service on IBM Cloud? Click here.

Unable to connect to Kafka cluster

Symptoms

The following error is displayed when trying to connect to your Kafka cluster using SSL, for example, when running the Kafka Connect source connector for IBM MQ:

org.apache.kafka.common.errors.SslAuthenticationException: SSL handshake failed

Causes

The Java process might replace the IP address of your cluster with the corresponding hostname value found in your /etc/hosts file.

For example, to be able to access Docker images from your IBM Cloud Private cluster, you might have added an entry in your /etc/hosts file that corresponds to the IP address of your cluster, such as 192.0.2.24 mycluster.icp.

In such cases, the following Java exception is displayed after the previously mentioned error message:

Caused by: java.security.cert.CertificateException: No subject alternative DNS name matching XXXXX found.

Resolving the problem

If you see the exception mentioned previously, comment out the hostname value in your /etc/hosts file to solve this connection issue.