question Re: Apache NiFi - Authentication with OpenID Connect - Not Working in Archives of Support Questions (Read Only)

Apache NiFi - Authentication with OpenID Connect - Not Working

ManishaJain — Thu, 09 Nov 2017 17:30:47 GMT

Nifi Version - 1.4.0

I have followed the steps shared in the below article :

https://bryanbende.com/development/2017/10/03/apache-nifi-openid-connect

But after doing all the steps mentioned ,when im trying to acess nifi web url using https..

https://<ipaddress>:8083/nifi ,it throws the below error on the browser:

An error occurred during a connection to <ipaddress>:8083. Cannot communicate securely with peer: no common encryption algorithm(s). (Error code: ssl_error_no_cypher_overlap)

have i missed anything else in the configuration ?

Re: Apache NiFi - Authentication with OpenID Connect - Not Working

ManishaJain — Thu, 09 Nov 2017 17:33:16 GMT

@Bryan Bende

Any pointers would be helpful .

Thanks!!

Re: Apache NiFi - Authentication with OpenID Connect - Not Working

ManishaJain — Mon, 13 Nov 2017 15:05:49 GMT

@Bryan Bende

Thanks for pointing out the issue ,you were right about the SSL configuration.

After it was configured correctly , it worked . Thanks

Re: Apache NiFi - Authentication with OpenID Connect - Not Working

federico_facca — Sat, 17 Feb 2018 00:24:41 GMT

@manisha jain

i am struggling to understand how it is supposed to work.

do the client need to authenticate with the certificate also if you are using oidc?

I thought that only a working certificate was needed in the keystore for that,

and that nothing regarding the identity was needed using oidc (given that identity

is covered by oidc).

any example of how you did configure your system would be appreciated.