Connecting to Hermes Messaging Service via Kafka Consumer

[Yuji]

I am trying to connect to Hermes Messaging Service using python kafka consumer. Could you please tell me how to get the files specified for the parameters ssl.ca.location, ssl.key.location, and ssl.certificate.location in kafka consumer?

I am struggling because keystore and truststore cannot be used in python. For ssl.ca.location set in kafka consumer, I specify the certificate downloaded from the instance, InstancePKI-Issuing-CA. For ssl.key.location and ssl.certification.location, I specify the key and certificate extracted from the keystore.

When connecting to the broker, the following error occurred.

"SSL handshake failed: error:0A000086:SSL routines::certificate verify failed: broker certificate could not be verified, verify that ssl.ca.location is correctly configured or root CA certificates are installed"

[GlideFather]

I have no experience myself, try to check for this thread:
https://www.servicenow.com/community/telecom-blog/how-to-post-topics-using-hermes-kafka-messaging-an... 

Or ServiceNow official documentations:
https://docs.servicenow.com/bundle/xanadu-servicenow-platform/page/administer/hermes-messaging-servi...

https://docs.servicenow.com/bundle/vancouver-platform-security/page/administer/log-export-service/ta...

[Yuji · Accepted solution]

I found that the CA certificate I set for ssl.ca.location was wrong.
I created the pem file with following and set it to ssl.ca.location.
download ipki ca certificate from ServiceNow Instance.(saved as ipki-ca.pem)
download entrust g2 ca certificate from Entrust site. (saved as entrust_g2_ca.cer)
combine these certificate into one pem file. (cat ipki-ca.pem entrust_g2_ca.cer >> ca.pem)