Skip to content

Instantly share code, notes, and snippets.

@kwilczynski
Created February 27, 2021 23:42
Show Gist options
  • Save kwilczynski/6a4b5a20869c1bc9a67ac368516531f6 to your computer and use it in GitHub Desktop.
Save kwilczynski/6a4b5a20869c1bc9a67ac368516531f6 to your computer and use it in GitHub Desktop.
Sarama enable TLS - Kafka in Go
config := sarama.NewConfig()
config.Net.SASL.Enable = true
config.Net.SASL.User = "bob"
config.Net.SASL.Password = "builder123"
config.Net.TLS.Enable = true
tlsConfig := &tls.Config{
InsecureSkipVerify: false,
PreferServerCipherSuites: true,
ClientAuth: tls.NoClientCert,
CurvePreferences: []tls.CurveID{tls.CurveP521, tls.CurveP384, tls.CurveP256},
CipherSuites: []uint16{
tls.TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,
tls.TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,
tls.TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,
tls.TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,
tls.TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305,
tls.TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305,
tls.TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA,
tls.TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA,
tls.TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA,
tls.TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA,
tls.TLS_RSA_WITH_AES_128_GCM_SHA256,
tls.TLS_RSA_WITH_AES_256_GCM_SHA384,
tls.TLS_RSA_WITH_AES_128_CBC_SHA,
tls.TLS_RSA_WITH_AES_256_CBC_SHA,
},
MinVersion: tls.VersionTLS12,
}
config.Net.TLS.Config = tlsConfig
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment