Support Questions

Find answers, ask questions, and share your expertise
Announcements
Celebrating as our community reaches 100,000 members! Thank you!

SSL Certificates validation for hadoop components in HDP

avatar
Explorer

Hi All,

I would like know regarding how can i verify or validate the SSL certificates expiry for all the hadoop components installed on my HDP cluster. Would really appreciate getting any help on methods to check the SSL certificates. Thanks

2 ACCEPTED SOLUTIONS

avatar
Master Collaborator

 

This link http://www.smartjava.org/content/how-analyze-java-ssl-errors/# covers the diagnosis methods to assess issues with Passwords, Incomplete CA Chains, Invalid keys and Certificate expiration

 

For testing truststore this link will be useful https://docs.cloudera.com/documentation/enterprise/6/6.3/topics/cm_sg_tls_troubleshoot.html#concept_...

 

And https://www.shellhacks.com/openssl-check-ssl-certificate-expiration-date/ for determining the expiration date.

View solution in original post

avatar
Super Guru

Assuming you used the same certs, or even if you user different ones; you should be able to click the lock in any SSL based UIs (Ambari, Ranger, Nifi, yarn, grafana, etc) in your browser.  This will show you all details of the certs including expiration dates.

View solution in original post

2 REPLIES 2

avatar
Master Collaborator

 

This link http://www.smartjava.org/content/how-analyze-java-ssl-errors/# covers the diagnosis methods to assess issues with Passwords, Incomplete CA Chains, Invalid keys and Certificate expiration

 

For testing truststore this link will be useful https://docs.cloudera.com/documentation/enterprise/6/6.3/topics/cm_sg_tls_troubleshoot.html#concept_...

 

And https://www.shellhacks.com/openssl-check-ssl-certificate-expiration-date/ for determining the expiration date.

avatar
Super Guru

Assuming you used the same certs, or even if you user different ones; you should be able to click the lock in any SSL based UIs (Ambari, Ranger, Nifi, yarn, grafana, etc) in your browser.  This will show you all details of the certs including expiration dates.