Our Community is getting an upgrade! To get everything ready for the relaunch, we’ll be placing the site in read-only mode starting September 21st.
We really appreciate your understanding while we get things set up behind the scenes. Catch up on all the exciting details about the move here.
Need help or have questions? Drop us a line at [email protected]

Support Questions

Find answers, ask questions, and share your expertise
Announcements
Share your experience with Cloudera on G2 and get a $25 Amazon Gift card.
Hi, I'm CLEO! Something exciting is coming to the Community. Stay Tuned!

Hive Kerberos with SSL - how to configure

avatar
Reader

I followed https://docs.cloudera.com/cdp-private-cloud-base/7.1.8/securing-hive/topics/hive-enable-tls.html to configure Hive Kerberos with SSL. There was no issue, however , when I tried to obtain/display certs on client side to be used in connection, I obtained the following:

 

openssl s_client -connect my_host:10000 -showcerts       

CONNECTED(00000005)

read:errno=0

---

no peer certificate available

---

No client certificate CA names sent

---

SSL handshake has read 0 bytes and written 287 bytes

---

New, (NONE), Cipher is (NONE)

Secure Renegotiation IS NOT supported

Compression: NONE

Expansion: NONE

No ALPN negotiated

SSL-Session:

    Protocol : TLSv1.3

    Cipher : 0000

    Session-ID: 

    Session-ID-ctx: 

    Master-Key: 

    Start Time: 1675956752

    Timeout : 7200 (sec)

    Verify return code: 0 (ok)

1 REPLY 1

avatar
Master Collaborator

@ArtG001 Have you enabled SSL/TLS for Hiveserver2 as per the doc you have shared above, else we should see a valid result here? Do confirm.

 

I tried the openssl command on a non SSL Hive endpoint and I got similar response.