https://community.cloudera.com/t5/Support-Questions/SSLHandshakeException-in-Secured-Nifi-Cluster-Setup/m-p/391593#M247684 <P>thank u very much. that helped me</P> Sat, 10 Aug 2024 04:17:20 GMT zxcc 2024-08-10T04:17:20Z https://community.cloudera.com/t5/Support-Questions/SSLHandshakeException-in-Secured-Nifi-Cluster-Setup/m-p/344580#M234207 <P>We are trying to set up a 3 node nifi cluster on GCP virtual machine (Ubuntu). Have used a CA signed certificate for creating <STRONG>truststore</STRONG> and <STRONG>keystore</STRONG> (Followed this <A href="https://community.cloudera.com/t5/Community-Articles/How-to-create-user-generated-keys-for-securing-NiFi/ta-p/245551)" target="_self">link</A> for creation). Have attached them through nifi.properties file. Still getting below exception on tailing logs:</P><PRE>2022-05-26 18:14:26,544 INFO [main] o.a.n.c.p.AbstractNodeProtocolSender Cluster Coordinator is located at hostname:7474. Will send Cluster Connection Request to this address 2022-05-26 18:14:26,780 WARN [main] o.a.nifi.controller.StandardFlowService Failed to connect to cluster due to: org.apache.nifi.cluster.protocol.ProtocolException: Failed marshalling 'CONNECTION_REQUEST' protocol message due to: javax.net.ssl.SSLHandshakeException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target 2022-05-26 18:14:31,783 INFO [main] o.a.n.c.c.n.LeaderElectionNodeProtocolSender Determined that Cluster Coordinator is located at hostname:7474; will use this address for sending heartbeat messages</PRE><P>On the nifi UI seeing this&nbsp;</P><PRE>javax.net.ssl.SSLPeerUnverifiedException: Hostname xx.yy.aa.bb not verified: certificate: sha256/I6cvWHqdHyhMxgNMGFcIwjY2zssGR***hidding_something_here**wjnWezSDm4= DN: CN=Guru Prakash, OU=Comm***, O=**pna, L=Bangalore, ST=Karnataka, C=IN subjectAltNames: []</PRE><P><BR />Please help&nbsp;<span class="lia-unicode-emoji" title=":folded_hands:">🙏</span><BR />&nbsp;</P> Fri, 27 May 2022 08:24:36 GMT https://community.cloudera.com/t5/Support-Questions/SSLHandshakeException-in-Secured-Nifi-Cluster-Setup/m-p/344580#M234207 Nifi_Noob 2022-05-27T08:24:36Z https://community.cloudera.com/t5/Support-Questions/SSLHandshakeException-in-Secured-Nifi-Cluster-Setup/m-p/344585#M234209 <P><a href="https://community.cloudera.com/t5/user/viewprofilepage/user-id/98207">@Nifi_Noob</a>&nbsp;</P><P><SPAN>Followed this&nbsp;</SPAN><A href="https://community.cloudera.com/t5/Community-Articles/How-to-create-user-generated-keys-for-securing-NiFi/ta-p/245551)" target="_self">link</A><SPAN>&nbsp;for creation is not a usable link. Can you update.</SPAN></P><P><SPAN>Geoffrey</SPAN></P> Fri, 27 May 2022 06:58:34 GMT https://community.cloudera.com/t5/Support-Questions/SSLHandshakeException-in-Secured-Nifi-Cluster-Setup/m-p/344585#M234209 Shelton 2022-05-27T06:58:34Z https://community.cloudera.com/t5/Support-Questions/SSLHandshakeException-in-Secured-Nifi-Cluster-Setup/m-p/344601#M234217 <P>Please make sure SSL certificates are created with the following settings&nbsp;<A href="https://docs.cloudera.com/cfm/2.1.4/cfm-security/topics/cfm-security-tls-certificate-requirements-recommendations.html" target="_blank">https://docs.cloudera.com/cfm/2.1.4/cfm-security/topics/cfm-security-tls-certificate-requirements-recommendations.html</A></P> Fri, 27 May 2022 13:23:08 GMT https://community.cloudera.com/t5/Support-Questions/SSLHandshakeException-in-Secured-Nifi-Cluster-Setup/m-p/344601#M234217 ckumar 2022-05-27T13:23:08Z https://community.cloudera.com/t5/Support-Questions/SSLHandshakeException-in-Secured-Nifi-Cluster-Setup/m-p/391593#M247684 <P>thank u very much. that helped me</P> Sat, 10 Aug 2024 04:17:20 GMT https://community.cloudera.com/t5/Support-Questions/SSLHandshakeException-in-Secured-Nifi-Cluster-Setup/m-p/391593#M247684 zxcc 2024-08-10T04:17:20Z