Support Questions

Find answers, ask questions, and share your expertise
Announcements
Celebrating as our community reaches 100,000 members! Thank you!

[Cloudera][DriverSupport] (1100) SSL certificate verification failed because the certificate is missing or incorrect.

avatar
New Contributor

Hi All,

 

We are getting below error on windows server while establishing a connection to DB server.

 

[Cloudera][DriverSupport] (1100) SSL certificate verification failed because the certificate is missing or incorrect.

 

Impala ODBC driver version: 2.6.10

 

This was working before 2 days back and we did not make any changes to it.

We have .pem file in place already.

2 REPLIES 2

avatar
Master Collaborator

Hey @prabhu111

Thank you for bringing this to our community.

 

>>>> [Cloudera][DriverSupport] (1100) SSL certificate verification failed because the certificate is missing or incorrect. <<<<

 

Since I could not narrow-down what could be the probable cause(s) for this.

Here is something I would suggest you start with:

 

1. Did the problem occur after the SSL Certs were renewed/updated on this Cluster?

2. What is the ODBC Connection string used to connect to Impala?

 

SANITY CHECKS:

3. Try enabling TRACE level ODBC DRIVER logging and observe the logs for probable cause.

The instructions are in Page 19 of this Driver doc: https://www.cloudera.com/documentation/other/connectors/impala-odbc/latest/Cloudera-ODBC-Driver-for-...

 

Assuming that you are using "cacert.pem" under "C:\Program Files\Cloudera-ODBC Driver-for-Impala\lib" for "Trusted Certificates".

The trusted CA certificates in the cacert.pem file will be used to verify the Impala server.

 

4. You can also verify the certs with the following openssl command:

openssl s_client -showcerts -servername <server fqdn> -connect <server>:21050

 

5. See if you have Valid/Proper cacert.pem file with the non-expired dates? If it is expired it needs to be updated/renewed with the new CA certs.

 

HTH.

 

V

avatar
Community Manager

@prabhu111, Has the reply helped resolve your issue? If so, please mark the appropriate reply as the solution, as it will make it easier for others to find the answer in the future.  



Regards,

Vidya Sargur,
Community Manager


Was your question answered? Make sure to mark the answer as the accepted solution.
If you find a reply useful, say thanks by clicking on the thumbs up button.
Learn more about the Cloudera Community: