CDP - Zeppelin - Livy Error

[#1]

When I tried to run simple commands os Zeppelin like this:

%livy.pyspark sc.version

I'm getting this error:

Caused by: org.apache.zeppelin.livy.LivyException: org.springframework.web.client.RestClientException: Error running rest call; nested exception is org.springframework.web.client.ResourceAccessException: I/O error on GET request for "https://SERVER:8998/version": PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target; nested exception is javax.net.ssl.SSLHandshakeException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target

We changed the Livy Server instance to other hosts.

How can I solve this?

[#2]

I fixed this issue configuring Zeppelin and Live at the same host. Is there any other way to fix that?

[#3]

Hi @paulo_klein, To access the Livy, Zeppelin requires its own SSL certificate imported in the trustore to be configured. You can refer to the documentation, Livy Interpreter for Apache Zeppelin SSL configuration

[#4]

Hi @jagadeesan , Thanks for you reply.

How can I manually import/create trustore in zeppelin?

When I rearranged the services, installing Zeppeling Server/Livy Server at the same host, the certification error stopped appearing.

I would like to configure the services on separate hosts. Could I relocate Zeppeling back to the other host and see if the error happened again?

Thanks!

[#5 · Accepted solution]

Hi @paulo_klein, you can refer to the documentation for Configuring TLS/SSL encryption manually for Zeppelin. Yes, you can move the Zeppelin server to another host but make sure you have an SSL certificate configured correctly, the below documentation might helpful for further troubleshooting. 

https://docs.cloudera.com/cdp-private-cloud-base/7.1.7/security-how-to-guides/topics/cm-security-how...

https://docs.cloudera.com/cdp-private-cloud-base/7.1.7/security-how-to-guides/topics/cm-security-how...

[#6]

@paulo_klein, Have any of the replies helped resolve your issue? If so, please mark the appropriate reply as the solution, as it will make it easier for others to find the answer in the future.