Have something interesting to share with Java Eastern Europe community?
Become a speaker now
Alan Scherger

Alan Scherger

Founder at HpyDev LLC, USA

I’m an operations-focused developer. I have experience running and developing with the Netflix stack, starting with Asgard. I now, of course, study, manage, and sometimes even contribute to tools such as Mesos, Kubernetes, Nomad, and Spinnaker. When I’m not starring into pixels, I can be found picking-up and putting-down heavy things at a strength training gym, or unoriginally exploring coffee shops and boardgames whenever friends are free.

Speaker's activity
Demystifying Certificates and TLS For Java Developers
Talk
English

What exactly is an SSL Certificate? Do rolling out tools with mTLS enabled seem impossible? Can you test that your infrastructure tools properly uphold the security claims they make regarding mTLS? Does the thought of rotating the certificate authority your service mesh rely on scare you? In this talk, we will begin our journey looking at the RFCs behind these technologies. Next, we will use OpenSSL, CFSSL, and mkcert to validate what we have learned about X509 v3 certificates. We will then bootstrap Consul to quickly demonstrate server, client, and browser usages of certificates. After that, we’ll do a deep-dive into how Kafka uses certificates to secure its brokers and clients, and possibly (KIP-515) its connections to Zookeeper.