SQOOP Caused by: java.security.cert.CertPathValidatorException: Algorithm constraints check failed on keysize limits: RSA 1024 bit key used with certificate: CN=SSL_Self_Signed_Fallback

Question

sqoop import --connect 'jdbc:sqlserver://X.X.X.X:1433;database=TOTO' --table TOTO --username=toto --password=toto SLF4J: Class path contains multiple SLF4J bindings.SLF4J: Found binding in [jar:file:/opt/cloudera/parcels/CDH-7.1.8-1.cdh7.1.8.p0.30990532/jars/slf4j-log4j12-1.7.30.jar!/org/slf4j/impl/StaticLoggerBinder.class]SLF4J: Found binding in [jar:file:/opt/cloudera/parcels/CDH-7.1.8-1.cdh7.1.8.p0.30990532/jars/log4j-slf4j-impl-2.17.1.jar!/org/slf4j/impl/StaticLoggerBinder.class]SLF4J: See http://www.slf4j.org/codes.html#multiple_bindings for an explanation.SLF4J: Actual binding is of type [org.slf4j.impl.Log4jLoggerFactory]23/03/25 10:33:22 INFO sqoop.Sqoop: Running Sqoop version: 1.4.7.7.1.8.0-80123/03/25 10:33:22 WARN tool.BaseSqoopTool: Setting your password on the command-line is insecure. Consider using -P instead.23/03/25 10:33:22 INFO manager.SqlManager: Using default fetchSize of 100023/03/25 10:33:22 INFO tool.CodeGenTool: Beginning code generation23/03/25 10:33:23 ERROR manager.SqlManager: Error executing statement: com.microsoft.sqlserver.jdbc.SQLServerException: The driver could not establish a secure connection to SQL Server by using Secure Sockets Layer (SSL) encryption. Error: "Certificates do not conform to algorithm constraints". ClientConnectionId:76e77cc1-b9ec-441e-a783-bdb46207d8d0com.microsoft.sqlserver.jdbc.SQLServerException: The driver could not establish a secure connection to SQL Server by using Secure Sockets Layer (SSL) encryption. Error: "Certificates do not conform to algorithm constraints". ClientConnectionId:76e77cc1-b9ec-441e-a783-bdb46207d8d0at com.microsoft.sqlserver.jdbc.SQLServerConnection.terminate(SQLServerConnection.java:2435)at com.microsoft.sqlserver.jdbc.TDSChannel.enableSSL(IOBuffer.java:1816)at com.microsoft.sqlserver.jdbc.SQLServerConnection.connectHelper(SQLServerConnection.java:2022)at com.microsoft.sqlserver.jdbc.SQLServerConnection.login(SQLServerConnection.java:1687)at com.microsoft.sqlserver.jdbc.SQLServerConnection.connectInternal(SQLServerConnection.java:1528)at com.microsoft.sqlserver.jdbc.SQLServerConnection.connect(SQLServerConnection.java:866)at com.microsoft.sqlserver.jdbc.SQLServerDriver.connect(SQLServerDriver.java:569)at java.sql.DriverManager.getConnection(DriverManager.java:664)at java.sql.DriverManager.getConnection(DriverManager.java:247)at org.apache.sqoop.manager.SqlManager.makeConnection(SqlManager.java:888)at org.apache.sqoop.manager.GenericJdbcManager.getConnection(GenericJdbcManager.java:59)at org.apache.sqoop.manager.SqlManager.execute(SqlManager.java:747)at org.apache.sqoop.manager.SqlManager.execute(SqlManager.java:770)at org.apache.sqoop.manager.SqlManager.getColumnInfoForRawQuery(SqlManager.java:286)at org.apache.sqoop.manager.SqlManager.getColumnTypesForRawQuery(SqlManager.java:257)at org.apache.sqoop.manager.SqlManager.getColumnTypes(SqlManager.java:243)at org.apache.sqoop.manager.ConnManager.getColumnTypes(ConnManager.java:334)at org.apache.sqoop.orm.ClassWriter.getColumnTypes(ClassWriter.java:1879)at org.apache.sqoop.orm.ClassWriter.generate(ClassWriter.java:1672)at org.apache.sqoop.tool.CodeGenTool.generateORM(CodeGenTool.java:106)at org.apache.sqoop.tool.ImportTool.importTable(ImportTool.java:524)at org.apache.sqoop.tool.ImportTool.run(ImportTool.java:676)at org.apache.sqoop.Sqoop.run(Sqoop.java:151)at org.apache.hadoop.util.ToolRunner.run(ToolRunner.java:81)at org.apache.sqoop.Sqoop.runSqoop(Sqoop.java:187)at org.apache.sqoop.Sqoop.runTool(Sqoop.java:241)at org.apache.sqoop.Sqoop.runTool(Sqoop.java:250)at org.apache.sqoop.Sqoop.main(Sqoop.java:259)Caused by: javax.net.ssl.SSLHandshakeException: Certificates do not conform to algorithm constraintsat sun.security.ssl.Alert.createSSLException(Alert.java:131)at sun.security.ssl.TransportContext.fatal(TransportContext.java:324)at sun.security.ssl.TransportContext.fatal(TransportContext.java:267)at sun.security.ssl.TransportContext.fatal(TransportContext.java:262)at sun.security.ssl.CertificateMessage$T12CertificateConsumer.checkServerCerts(CertificateMessage.java:654)at sun.security.ssl.CertificateMessage$T12CertificateConsumer.onCertificate(CertificateMessage.java:473)at sun.security.ssl.CertificateMessage$T12CertificateConsumer.consume(CertificateMessage.java:369)at sun.security.ssl.SSLHandshake.consume(SSLHandshake.java:377)at sun.security.ssl.HandshakeContext.dispatch(HandshakeContext.java:444)at sun.security.ssl.HandshakeContext.dispatch(HandshakeContext.java:422)at sun.security.ssl.TransportContext.dispatch(TransportContext.java:182)at sun.security.ssl.SSLTransport.decode(SSLTransport.java:152)at sun.security.ssl.SSLSocketImpl.decode(SSLSocketImpl.java:1397)at sun.security.ssl.SSLSocketImpl.readHandshakeRecord(SSLSocketImpl.java:1305)at sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:440)at com.microsoft.sqlserver.jdbc.TDSChannel.enableSSL(IOBuffer.java:1753)... 26 moreCaused by: java.security.cert.CertificateException: Certificates do not conform to algorithm constraintsat sun.security.ssl.AbstractTrustManagerWrapper.checkAlgorithmConstraints(SSLContextImpl.java:1429)at sun.security.ssl.AbstractTrustManagerWrapper.checkAdditionalTrust(SSLContextImpl.java:1354)at sun.security.ssl.AbstractTrustManagerWrapper.checkServerTrusted(SSLContextImpl.java:1298)at sun.security.ssl.CertificateMessage$T12CertificateConsumer.checkServerCerts(CertificateMessage.java:638)... 37 moreCaused by: java.security.cert.CertPathValidatorException: Algorithm constraints check failed on keysize limits: RSA 1024 bit key used with certificate: CN=SSL_Self_Signed_Fallbackat sun.security.util.DisabledAlgorithmConstraints$KeySizeConstraint.permits(DisabledAlgorithmConstraints.java:893)at sun.security.util.DisabledAlgorithmConstraints$Constraints.permits(DisabledAlgorithmConstraints.java:509)at sun.security.util.DisabledAlgorithmConstraints.permits(DisabledAlgorithmConstraints.java:252)at sun.security.util.DisabledAlgorithmConstraints.permits(DisabledAlgorithmConstraints.java:198)at sun.security.provider.certpath.AlgorithmChecker.check(AlgorithmChecker.java:292)at sun.security.ssl.AbstractTrustManagerWrapper.checkAlgorithmConstraints(SSLContextImpl.java:1425)... 40 more23/03/25 10:33:23 ERROR tool.ImportTool: Import failed: java.io.IOException: No columns to generate for ClassWriterat org.apache.sqoop.orm.ClassWriter.generate(ClassWriter.java:1678)at org.apache.sqoop.tool.CodeGenTool.generateORM(CodeGenTool.java:106)at org.apache.sqoop.tool.ImportTool.importTable(ImportTool.java:524)at org.apache.sqoop.tool.ImportTool.run(ImportTool.java:676)at org.apache.sqoop.Sqoop.run(Sqoop.java:151)at org.apache.hadoop.util.ToolRunner.run(ToolRunner.java:81)at org.apache.sqoop.Sqoop.runSqoop(Sqoop.java:187)at org.apache.sqoop.Sqoop.runTool(Sqoop.java:241)at org.apache.sqoop.Sqoop.runTool(Sqoop.java:250)at org.apache.sqoop.Sqoop.main(Sqoop.java:259)

bennour · Accepted Answer

hello, thanks for your help, i have tried your proposal using --useSSL=false, but it did not work for me.

Unrecognized argument: --useSSL=false

Unrecognized argument: -useSSL=false

I have solved my issue by using:

java version "1.8.0_60"
Java(TM) SE Runtime Environment (build 1.8.0_60-b27)
Java HotSpot(TM) 64-Bit Server VM (build 25.60-b23, mixed mode)

Instead of

openjdk version "1.8.0_352"
OpenJDK Runtime Environment (build 1.8.0_352-b08)
OpenJDK 64-Bit Server VM (build 25.352-b08, mixed mode)

steven-matison · Answer

@bennour This error is an issue with your database endpoint ssl. My first suggestion is to use the following arugment in your sqoop command:

useSSL=false

then if this doesn't work, focus on getting a proper ssl certificate for the host.

Sign up

Please use your Cloudera account.

Login to the community

Please use your Cloudera account.