Support Questions
Find answers, ask questions, and share your expertise
Announcements
Alert: Welcome to the Unified Cloudera Community. Former HCC members be sure to read and learn how to activate your account here.

Hue job browser SSL connection issue

Highlighted

Hue job browser SSL connection issue

New Contributor

Running into below error after cert renewal :

RestException: [Errno 1] _ssl.c:492: error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed

[28/Apr/2020 09:40:34 -0400] base ERROR Internal Server Error: /jobbrowser/
Traceback (most recent call last):
File "/opt/cloudera/parcels/CDH-5.1.0-1.cdh5.1.0.p0.53/lib/hue/build/env/lib/python2.6/site-packages/Django-1.4.5-py2.6.egg/django/core/handlers/base.py", line 111, in get_response
response = callback(request, *callback_args, **callback_kwargs)
File "/opt/cloudera/parcels/CDH-5.1.0-1.cdh5.1.0.p0.53/lib/hue/apps/jobbrowser/src/jobbrowser/views.py", line 97, in jobs
jobs = get_api(request.user, request.jt).get_jobs(user=request.user, username=user, state=state, text=text, retired=retired)
File "/opt/cloudera/parcels/CDH-5.1.0-1.cdh5.1.0.p0.53/lib/hue/apps/jobbrowser/src/jobbrowser/api.py", line 84, in decorate
raise ex
RestException: [Errno 1] _ssl.c:492: error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed

 

The error seems to indicate that the SSL connection to job browser from Hue is failing, however the certs are all valid. Has anyone seen this error before?

3 REPLIES 3
Highlighted

Re: Hue job browser SSL connection issue

Expert Contributor

@pavel_tyan Do you have the REQUESTS_CA_BUNDLE environment variable set as shown in "Hue as an SSL Client": http://www.cloudera.com/content/cloudera/en/documentation/core/latest/topics/cm_sg_ssl_hue.html#conc...

If yes, then use the following documentation to configure sufficient trust:
http://www.cloudera.com/documentation/enterprise/latest/topics/cm_sg_ssl_hue.html

Cloudera Manager 5.4 and below, this is set using the Environment Safety Valve:

  1. Click Configuration
  2. Select Scope > Hue
  3. Select Category > Advanced
  4. In the Search field, type: Hue Service Environment to show the Hue Service Environment Advanced Configuration Snipper (Safety Valve) property
  5. Edit the value and add:  ​REQUESTS_CA_BUNDLE=/path/to/hue_trust_file
Highlighted

Re: Hue job browser SSL connection issue

New Contributor

@GangWar Thanks for replying!

 

it looks like our Hue is set up as SSL server rather than client. Would we still need the REQUESTS_CA_BUNDLE?

Highlighted

Re: Hue job browser SSL connection issue

Expert Contributor
Yes, If I remember correctly. Please give it a try else might we we need to recreate the certificate bundle.
Don't have an account?
Coming from Hortonworks? Activate your account here