question SSL Certificates validation for hadoop components in HDP in Support Questions

SSL Certificates validation for hadoop components in HDP

nk_11 — Fri, 28 Feb 2020 16:37:17 GMT

Hi All,

I would like know regarding how can i verify or validate the SSL certificates expiry for all the hadoop components installed on my HDP cluster. Would really appreciate getting any help on methods to check the SSL certificates. Thanks

Re: SSL Certificates validation for hadoop components in HDP

venkatsambath — Sat, 29 Feb 2020 11:57:49 GMT

This link http://www.smartjava.org/content/how-analyze-java-ssl-errors/# covers the diagnosis methods to assess issues with Passwords, Incomplete CA Chains, Invalid keys and Certificate expiration

For testing truststore this link will be useful https://docs.cloudera.com/documentation/enterprise/6/6.3/topics/cm_sg_tls_troubleshoot.html#concept_qvx_2xc_nw

And https://www.shellhacks.com/openssl-check-ssl-certificate-expiration-date/ for determining the expiration date.

Re: SSL Certificates validation for hadoop components in HDP

stevenmatison — Sat, 29 Feb 2020 14:58:24 GMT

Assuming you used the same certs, or even if you user different ones; you should be able to click the lock in any SSL based UIs (Ambari, Ranger, Nifi, yarn, grafana, etc) in your browser. This will show you all details of the certs including expiration dates.