Skip to main content
paulo_klein
paulo_klein
Gold ⭐️
July 29, 2022
Solved

CDP - Zeppelin - Livy Error

When I tried to run simple commands os Zeppelin like this:

%livy.pyspark sc.version

 

I'm getting this error:

Caused by: org.apache.zeppelin.livy.LivyException: org.springframework.web.client.RestClientException: Error running rest call; nested exception is org.springframework.web.client.ResourceAccessException: I/O error on GET request for "https://SERVER:8998/version": PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target; nested exception is javax.net.ssl.SSLHandshakeException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target

 

We changed the Livy Server instance to other hosts.

 

How can I solve this?image.png

jagadeesan
jagadeesanAnswer
Platinum ⭐️
July 30, 2022

Hi @paulo_klein, you can refer to the documentation for Configuring TLS/SSL encryption manually for Zeppelin. Yes, you can move the Zeppelin server to another host but make sure you have an SSL certificate configured correctly, the below documentation might helpful for further troubleshooting. 

https://docs.cloudera.com/cdp-private-cloud-base/7.1.7/security-how-to-guides/topics/cm-security-how-to-obtain-server-certs-tls.html

https://docs.cloudera.com/cdp-private-cloud-base/7.1.7/security-how-to-guides/topics/cm-security-how-to-renew-certs-tls.html

 

View in thread

5 replies

paulo_klein
paulo_kleinAuthor
Gold ⭐️
July 29, 2022

I fixed this issue configuring Zeppelin and Live at the same host. Is there any other way to fix that?

Translate
jagadeesan
Platinum ⭐️
jagadeesan
Platinum ⭐️
July 30, 2022

Hi @paulo_klein, To access the Livy, Zeppelin requires its own SSL certificate imported in the trustore to be configured. You can refer to the documentation, Livy Interpreter for Apache Zeppelin SSL configuration

Translate
paulo_klein
paulo_kleinAuthor
Gold ⭐️
July 30, 2022

Hi @jagadeesan , Thanks for you reply.


How can I manually import/create trustore in zeppelin?

When I rearranged the services, installing Zeppeling Server/Livy Server at the same host, the certification error stopped appearing.

I would like to configure the services on separate hosts. Could I relocate Zeppeling back to the other host and see if the error happened again?

Thanks!

Translate
jagadeesan
Platinum ⭐️
jagadeesanAnswer
Platinum ⭐️
July 30, 2022

Hi @paulo_klein, you can refer to the documentation for Configuring TLS/SSL encryption manually for Zeppelin. Yes, you can move the Zeppelin server to another host but make sure you have an SSL certificate configured correctly, the below documentation might helpful for further troubleshooting. 

https://docs.cloudera.com/cdp-private-cloud-base/7.1.7/security-how-to-guides/topics/cm-security-how-to-obtain-server-certs-tls.html

https://docs.cloudera.com/cdp-private-cloud-base/7.1.7/security-how-to-guides/topics/cm-security-how-to-renew-certs-tls.html

 

Translate
    VidyaSargur
    Community Manager
    VidyaSargur
    Community Manager
    August 2, 2022

    @paulo_klein, Have any of the replies helped resolve your issue? If so, please mark the appropriate reply as the solution, as it will make it easier for others to find the answer in the future.  

    Translate
    Regards, Vidya Sargur, Community Manager Was your question answered? Make sure to mark the answer as the accepted solution. If you find a reply useful, say thanks by clicking on the thumbs up button.
    Terms & ConditionsAccessibility statement