Cloudera Community

Support Questions

Find answers, ask questions, and share your expertise
cancel
Turn on suggestions
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Advanced Search
Solved Go to solution

Installing SSL on Ambari-Server web

Labels:
avatar
author-rank prakashpunj
Expert Contributor

Created on ‎02-17-2016 01:30 AM - edited ‎09-16-2022 03:04 AM

I read the documentation but I am not able to, I have .crt file and .key file and .PFX file. Is that all is needed.

4,741 Views
0
1 ACCEPTED SOLUTION

avatar
author-rank Kartik_Agarwal author-rank
Master Collaborator

Created ‎10-11-2021 08:32 AM 

STEP 1: 
Get certificate from ambari-server 
echo | openssl s_client -showcerts -connect <AMBARI_HOst>:<AMBARI_HTTPs_PORT> 2>&1 | sed --quiet '/-BEGIN CERTIFICATE-/,/-END CERTIFICATE-/p' > /tmp/ambari_certificate.cr 

STEP 2: 
Get path of ambari trustore and truststore password from Ambari properties 
cat /etc/ambari-server/conf/ambari.properties |grep truststore 

As per your ambari.properties below is the path and password :-
ssl.trustStore.password=refer from ambari.property file
ssl.trustStore.path=/etc/ambari-server/conf/ambari-server-truststore

STEP 3: 
keytool -importcert -file /tmp/ambari_certificate.crt -keystore <keystore-path> 

STEP 4: 
ambari-server restart

View solution in original post

4,032 Views
0 Kudos
0
11 REPLIES 11

avatar
author-rank nsabharwal
Master Mentor

Created ‎02-17-2016 01:38 AM

@Prakash Punj

Are you following this ? http://docs.hortonworks.com/HDPDocuments/Ambari-2.2.0.0/bk_Ambari_Security_Guide/content/_optional_s...

3,690 Views
0 Kudos

avatar
author-rank nsabharwal
Master Mentor

Created ‎02-17-2016 10:25 AM

@Prakash Punj

3,689 Views
0 Kudos

avatar
author-rank prakashpunj
Expert Contributor

Created ‎02-17-2016 01:26 PM

@Neeraj Sabharwal

Yes I did followed the same step but not using the self-signed cert. When I tried I did got couple of warning but the SSL configuration wasn't that clean but it worked. Port 8443 was open and could connect. But then I noticed that all earlier created HIVE Views are not displaying any data. It was giving error. I think I posted that error on another thread.

Thanks

Prakash

3,690 Views

avatar
author-rank nsabharwal
Master Mentor

Created ‎02-17-2016 04:47 PM

@Prakash Punj Let me take a look on the other thread.

Trust Store Setup - If you plan to use Ambari Views with your Ambari Server, after enabling SSL for Ambari using the instructions below, you must also configure a Truststore for the Ambari Server. Refer to Set Up Truststore for Ambari Server for more information.

I believe we can close this thread.

3,690 Views
0 Kudos

avatar
author-rank prakashpunj
Expert Contributor

Created ‎02-17-2016 05:02 PM

One more question, after setting this trust-store, do I need to do the same step again to re install the certificates ?

SSL is already working on Ambari-Server

Thanks

prakash

3,690 Views

avatar
author-rank nsabharwal
Master Mentor

Created ‎02-17-2016 06:52 PM

@Prakash Punj I don't think so..If you face the issue then I would start from there.

3,690 Views
0 Kudos

avatar
author-rank nsabharwal
Master Mentor

Created ‎02-18-2016 08:30 PM

@Prakash Punj I believe you can help me to close this thread by accepting the answer as you have started a new thread in the same thread. New thread

3,689 Views
0 Kudos

avatar
author-rank prakashpunj
Expert Contributor

Created ‎02-17-2016 09:10 PM

@Neeraj Sabharwa

So I setup the trust-store but now I am getting this error. Any idea..

 E090 RA040 I/O error while requesting Ambari [AmbariApiException]
3,690 Views

avatar
author-rank prakashpunj
Expert Contributor

Created ‎02-17-2016 09:12 PM

E090 RA040 I/O error while requesting Ambari [AmbariApiException]

3,690 Views
Announcements
What's New @ Cloudera
[RELEASED] Cloudera Streaming Analytics - Kubernetes Operato...
What's New @ Cloudera
[RELEASED] Cloudera Streams Messaging - Kubernetes Operator ...
Community Announcements
February 2025 Community Highlights
What's New @ Cloudera
3 Benefits of External IDE Connectivity, Now Available in Cl...
What's New @ Cloudera
Performance comparison of Spark3 on YARN with S3 Standard VS...
View More Announcements