Support Questions
Find answers, ask questions, and share your expertise
Announcements
Alert: Welcome to the Unified Cloudera Community. Former HCC members be sure to read and learn how to activate your account here.

Hue and GoDaddy certificates

Solved Go to solution
Highlighted

Hue and GoDaddy certificates

Explorer

Hi!

I've been using Hue with a self-signed certificate and it's been fine, but after purchasing a certificate from GoDaddy I can't seem to get it

to work. I've seen a few comments that until recently CherryPy does not work with certificate chains which is what GoDaddy provides.

 

Has anyone managed to get this to work please? Thanks, Neil

1 ACCEPTED SOLUTION

Accepted Solutions
Highlighted

Re: Hue and GoDaddy certificates

Yes, these parts are in the [beeswax] or [impala] section so it is for SSL
between Hue and them, so unrelated to HTTPS in the Browser

View solution in original post

3 REPLIES 3

Re: Hue and GoDaddy certificates

Cloudera Employee
Hue ships an older forked version of CherryPy that doesn't support
Certificate chain files.

However, we just landed in our Git repo a fix for it:
https://github.com/cloudera/hue/commit/df932c6edbd3900a05f1ee9bef9b5e629329a817

this should be used with the .pem created like this

cat hostname.key hostname.crt gd_bundle.crt > certificate_chain.pem

(from
https://joshnisly.wordpress.com/2009/01/24/using-godaddy-certificates-with-cherrypy/
)

let us know if it solves it!
e.

Highlighted

Re: Hue and GoDaddy certificates

Explorer

Thanks for the quick turnaround!

 

It actually turned out to be simple - if you only use the public certificate part, and not the chain it works fine and users can now connect via a pretty domain name over https ;-)

 

I did have to leave ssl as disabled in hue.ini though. Perhaps this section is related to how Hue communicates with Hive rather than the browser?

 

[[ssl]]
# SSL communication enabled for this server.
## enabled=false

Highlighted

Re: Hue and GoDaddy certificates

Yes, these parts are in the [beeswax] or [impala] section so it is for SSL
between Hue and them, so unrelated to HTTPS in the Browser

View solution in original post

Don't have an account?
Coming from Hortonworks? Activate your account here