Support Questions
Find answers, ask questions, and share your expertise

Hue job browser SSL connection issue

Hue job browser SSL connection issue

New Contributor

Running into below error after cert renewal :

RestException: [Errno 1] _ssl.c:492: error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed

[28/Apr/2020 09:40:34 -0400] base ERROR Internal Server Error: /jobbrowser/
Traceback (most recent call last):
File "/opt/cloudera/parcels/CDH-5.1.0-1.cdh5.1.0.p0.53/lib/hue/build/env/lib/python2.6/site-packages/Django-1.4.5-py2.6.egg/django/core/handlers/base.py", line 111, in get_response
response = callback(request, *callback_args, **callback_kwargs)
File "/opt/cloudera/parcels/CDH-5.1.0-1.cdh5.1.0.p0.53/lib/hue/apps/jobbrowser/src/jobbrowser/views.py", line 97, in jobs
jobs = get_api(request.user, request.jt).get_jobs(user=request.user, username=user, state=state, text=text, retired=retired)
File "/opt/cloudera/parcels/CDH-5.1.0-1.cdh5.1.0.p0.53/lib/hue/apps/jobbrowser/src/jobbrowser/api.py", line 84, in decorate
raise ex
RestException: [Errno 1] _ssl.c:492: error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed

 

The error seems to indicate that the SSL connection to job browser from Hue is failing, however the certs are all valid. Has anyone seen this error before?

3 REPLIES 3

Re: Hue job browser SSL connection issue

Master Collaborator

@pavel_tyan Do you have the REQUESTS_CA_BUNDLE environment variable set as shown in "Hue as an SSL Client": http://www.cloudera.com/content/cloudera/en/documentation/core/latest/topics/cm_sg_ssl_hue.html#conc...

If yes, then use the following documentation to configure sufficient trust:
http://www.cloudera.com/documentation/enterprise/latest/topics/cm_sg_ssl_hue.html

Cloudera Manager 5.4 and below, this is set using the Environment Safety Valve:

  1. Click Configuration
  2. Select Scope > Hue
  3. Select Category > Advanced
  4. In the Search field, type: Hue Service Environment to show the Hue Service Environment Advanced Configuration Snipper (Safety Valve) property
  5. Edit the value and add:  ​REQUESTS_CA_BUNDLE=/path/to/hue_trust_file

Cheers!
Was your question answered? Make sure to mark the answer as the accepted solution.
If you find a reply useful, say thanks by clicking on the thumbs up button.

Re: Hue job browser SSL connection issue

New Contributor

@GangWar Thanks for replying!

 

it looks like our Hue is set up as SSL server rather than client. Would we still need the REQUESTS_CA_BUNDLE?

Re: Hue job browser SSL connection issue

Master Collaborator
Yes, If I remember correctly. Please give it a try else might we we need to recreate the certificate bundle.

Cheers!
Was your question answered? Make sure to mark the answer as the accepted solution.
If you find a reply useful, say thanks by clicking on the thumbs up button.