Support Questions

Find answers, ask questions, and share your expertise
Announcements
Celebrating as our community reaches 100,000 members! Thank you!

CDP - Zeppelin - Livy Error

avatar
Explorer

When I tried to run simple commands os Zeppelin like this:

%livy.pyspark sc.version

 

I'm getting this error:

Caused by: org.apache.zeppelin.livy.LivyException: org.springframework.web.client.RestClientException: Error running rest call; nested exception is org.springframework.web.client.ResourceAccessException: I/O error on GET request for "https://SERVER:8998/version": PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target; nested exception is javax.net.ssl.SSLHandshakeException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target

 

We changed the Livy Server instance to other hosts.

 

How can I solve this?image.png

1 ACCEPTED SOLUTION

avatar
Master Collaborator

Hi @paulo_klein, you can refer to the documentation for Configuring TLS/SSL encryption manually for Zeppelin. Yes, you can move the Zeppelin server to another host but make sure you have an SSL certificate configured correctly, the below documentation might helpful for further troubleshooting. 

https://docs.cloudera.com/cdp-private-cloud-base/7.1.7/security-how-to-guides/topics/cm-security-how...

https://docs.cloudera.com/cdp-private-cloud-base/7.1.7/security-how-to-guides/topics/cm-security-how...

 

View solution in original post

5 REPLIES 5

avatar
Explorer

I fixed this issue configuring Zeppelin and Live at the same host. Is there any other way to fix that?

avatar
Master Collaborator

Hi @paulo_kleinTo access the Livy, Zeppelin requires its own SSL certificate imported in the trustore to be configured. You can refer to the documentation, Livy Interpreter for Apache Zeppelin SSL configuration

avatar
Explorer

Hi @jagadeesan , Thanks for you reply.


How can I manually import/create trustore in zeppelin?

When I rearranged the services, installing Zeppeling Server/Livy Server at the same host, the certification error stopped appearing.

I would like to configure the services on separate hosts. Could I relocate Zeppeling back to the other host and see if the error happened again?

Thanks!

avatar
Master Collaborator

Hi @paulo_klein, you can refer to the documentation for Configuring TLS/SSL encryption manually for Zeppelin. Yes, you can move the Zeppelin server to another host but make sure you have an SSL certificate configured correctly, the below documentation might helpful for further troubleshooting. 

https://docs.cloudera.com/cdp-private-cloud-base/7.1.7/security-how-to-guides/topics/cm-security-how...

https://docs.cloudera.com/cdp-private-cloud-base/7.1.7/security-how-to-guides/topics/cm-security-how...

 

avatar
Community Manager

@paulo_klein, Have any of the replies helped resolve your issue? If so, please mark the appropriate reply as the solution, as it will make it easier for others to find the answer in the future.  



Regards,

Vidya Sargur,
Community Manager


Was your question answered? Make sure to mark the answer as the accepted solution.
If you find a reply useful, say thanks by clicking on the thumbs up button.
Learn more about the Cloudera Community: