Linux REDHAT7 Cloudera ODBC Driver for Apache Hive error certificate is missing or incorrect

[#1]

Hi,

We installed Cloudera ODBC Driver for Apache Hive 2.6.13.1013 on a Linux gateway server with REDHAT 7 and Oracle Database Gateway for ODBC 19c.

We have to connect Oracle Database using a dblink  to Linux Gateway server and then to Apache Hive server.

After all configurations the connection using dblink fails with error:

ORA-28500: connection from ORACLE to a non-Oracle system returned this message:
[Cloudera][DriverSupport] (1100) SSL certificate verification failed because the certificate is missing or incorrect. {HY000,NativeErr = 1100}
ORA-02063: preceding 2 lines from DATALAKE

odbc.ini configuration from Linux gateway server:

[ODBC Data Sources]
DATALAKE=Cloudera Hive ODBC Driver 64-bit

[DATALAKE]
Driver=/opt/cloudera/hiveodbc/lib/64/libclouderahiveodbc64.so
HiveServerType=2
Host=dataplatform.grupocgd.com
Port=10000
SSL=1
schema=default
ServiceDiscoveryMode=0
AuthMech=3
ThriftTransport=1
ValidateServerCertificate=1
TrustedCerts=/opt/cloudera/hiveodbc/lib/64/cacerts.pem

Can you help?

Best regards,

Sérgio Picamilho

[#2]

hi @Picamilho 

CLoudera ODBC driver can connect to Hiveserver2 only .

Please check couple of things:

 1. Check the truststore used by hiveserver2.

  2. COnvert that trustsrore to  PEM. You can use below command:

keytool -importkeystore -srckeystore <trustore>.jks -destkeystore keystore.p12 -srcstoretype jks -deststoretype pkcs12 -storepass<password>

openssl pkcs12 -in keystore.p12 -out keystore.pem

openssl pkcs12 -nodes -in keystore.p12 -out <name>.pem

Add below:

SSL=1
CAIssuedCertNamesMismatch=1
TrustedCerts=<path to PEM>

Remove below:

ThriftTransport=1
ValidateServerCertificate=1

[#3]

@Picamilho, Has the reply helped resolve your issue? If so, please mark the appropriate reply as the solution, as it will make it easier for others to find the answer in the future.