Support Questions

Find answers, ask questions, and share your expertise
Announcements
Celebrating as our community reaches 100,000 members! Thank you!

Linux REDHAT7 Cloudera ODBC Driver for Apache Hive error certificate is missing or incorrect

avatar
New Contributor

Hi,

 

We installed Cloudera ODBC Driver for Apache Hive 2.6.13.1013 on a Linux gateway server with REDHAT 7 and Oracle Database Gateway for ODBC 19c.

We have to connect Oracle Database using a dblink  to Linux Gateway server and then to Apache Hive server.

After all configurations the connection using dblink fails with error:

 

ORA-28500: connection from ORACLE to a non-Oracle system returned this message:
[Cloudera][DriverSupport] (1100) SSL certificate verification failed because the certificate is missing or incorrect. {HY000,NativeErr = 1100}
ORA-02063: preceding 2 lines from DATALAKE

 

odbc.ini configuration from Linux gateway server:

 

[ODBC Data Sources]
DATALAKE=Cloudera Hive ODBC Driver 64-bit

 

[DATALAKE]
Driver=/opt/cloudera/hiveodbc/lib/64/libclouderahiveodbc64.so
HiveServerType=2
Host=dataplatform.grupocgd.com
Port=10000
SSL=1
schema=default
ServiceDiscoveryMode=0
AuthMech=3
ThriftTransport=1
ValidateServerCertificate=1
TrustedCerts=/opt/cloudera/hiveodbc/lib/64/cacerts.pem

 

Can you help?

 

Best regards,

 

Sérgio Picamilho

2 REPLIES 2

avatar
Guru

hi @Picamilho 

 

CLoudera ODBC driver can connect to Hiveserver2 only .

 

Please check couple of things:

 1. Check the truststore used by hiveserver2.

  2. COnvert that trustsrore to  PEM. You can use below command:

 

keytool -importkeystore -srckeystore <trustore>.jks -destkeystore keystore.p12 -srcstoretype jks -deststoretype pkcs12 -storepass<password>

 

openssl pkcs12 -in keystore.p12 -out keystore.pem

openssl pkcs12 -nodes -in keystore.p12 -out <name>.pem

 

Add below:

 

SSL=1
CAIssuedCertNamesMismatch=1
TrustedCerts=<path to PEM>

 

Remove below:

 

ThriftTransport=1
ValidateServerCertificate=1

avatar
Community Manager

@Picamilho, Has the reply helped resolve your issue? If so, please mark the appropriate reply as the solution, as it will make it easier for others to find the answer in the future.  



Regards,

Vidya Sargur,
Community Manager


Was your question answered? Make sure to mark the answer as the accepted solution.
If you find a reply useful, say thanks by clicking on the thumbs up button.
Learn more about the Cloudera Community: