If "sasl_ssl" doesn't show up in Kafka.features does that mean it isn't supported?

My real issue is that I get Broker transport error whenever I try to run subscriptions for graphql using node-rdkafka using sasl_ssl and I’m trying to find a solution to that. I’ve installed everything I believe I need for librdkafka to work properly, but when I print out Kafka.features I get

[
  'gzip',
  'snappy',
  'ssl',
  'sasl',
  'regex',
  'lz4',
  'sasl_gssapi',
  'sasl_plain',
  'sasl_scram',
  'plugins',
  'zstd',
  'sasl_oauthbearer'
]

Because sasl_ssl doesn’t explicitly show up in this list does that mean it isn’t supported? I thought maybe because sasl and ssl are both there it might work, but I’m wondering if I’m wrong.

Thanks in advance for all the help!

[RicardoGralhoz]

Because sasl_ssl doesn’t explicitly show up in this list does that mean it isn’t supported?

Probably sasl_ssl shoudln’t be shown there. I also had 'security.protocol': 'sasl_ssl' with similar settings, had multiple issues and was able to fix all of them and sasl_ssl is still not shown as librdkafka features. See also librdkafka Configuration properties, especially builtin.features

Here are some useful links to help solving this type of connection issues:

• librdkafka requirements, especially dependency on libssl-dev (for SSL support) and libsasl2-dev ( for SASL GSSAPI support)
• librdkafka Brokers > SSL
• Using SSL with librdkafka
• Using SASL with librdkafka - special attention to step 4. Install SASL modules on client host

Adding more verbose logging from librdkafka helped too. See the consumer example:

// Valid debug mode options are CSV string of selected debug contexts:
//    "generic,broker,topic,metadata,feature,queue,msg,protocol,cgrp,
//      security,fetch,interceptor,plugin,consumer,admin,eos,mock,all" 
rdkafkaConfig.debug = "broker,protocol,security,consumer";

Helpful commands to fix missing dependencies and rebuild node-rdkafka:

1. apt -qq list libsasl2-modules-gssapi-mit libsasl2-dev libssl-dev
2. sudo apt-get install libsasl2-dev
3. sudo apt-get install libssl-dev
4. npm rebuild node-rdkafka --loglevel="verbose

Related issues:

1. Failure to initialize (error:SSL routines:SSL_CTX_new:library has no ciphers) #566
2. Cant make sasl_ssl work #2257

[stale[bot]]

This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs.