Support Questions

Find answers, ask questions, and share your expertise

Nifi - Trusted SSL configuration With HDF

avatar
Contributor

Hi Team,

I am trying to configure SSL in nifi - HDF but i am getting "invalid cert authority error".

The same trusted cert workig in standalone nifi.

Do we need to specify anything for Hdf- Nifi? for trusted ssl setup

Please provide your input to close this thread.

1 ACCEPTED SOLUTION

avatar
Master Mentor
@Anishkumar Valsalam

Standalone NiFi instances have no need to perform and 2-way TLS negotiations. Once you cluster, NiFi nodes need to communicate with each other and that negotiation uses 2-way TLS. Not sure where you got your keystore and truststore files from, but you need to verify that the contents of both are correct. The truststore.jks file should contain the necessary trustedCertEntries so that it can trust the client certificate being presented from the other nodes in your cluster.

Matt

View solution in original post

3 REPLIES 3

avatar
Contributor
@Matt Clarke

So many issues while configuring HDF, need your inputs to close this thread brother.

avatar
Master Mentor
@Anishkumar Valsalam

Standalone NiFi instances have no need to perform and 2-way TLS negotiations. Once you cluster, NiFi nodes need to communicate with each other and that negotiation uses 2-way TLS. Not sure where you got your keystore and truststore files from, but you need to verify that the contents of both are correct. The truststore.jks file should contain the necessary trustedCertEntries so that it can trust the client certificate being presented from the other nodes in your cluster.

Matt

avatar
Contributor

Thanks Matt , It seems becuase of corrupted keystore after replaced with the valid keystore it was resolved. 🙂