Support Questions
Find answers, ask questions, and share your expertise
Announcements
Alert: Welcome to the Unified Cloudera Community. Former HCC members be sure to read and learn how to activate your account here.

SSLHandshakeException between NiFi and NiFi registry

Highlighted

SSLHandshakeException between NiFi and NiFi registry

Dear Community members,

When NiFi and NiFi-registry running securely (ssl/https) , getting the below error when starting verson controlling in NiFi even after adding local NiFi user in the nifi-registry . Can someone please help .

Error

Unable to obtain listing of buckets: javax.net.ssl.SSLHandshakeException: java.security.cert.CertificateException: No subject alternative names present .

2 REPLIES 2
Highlighted

Re: SSLHandshakeException between NiFi and NiFi registry

You should ensure that both the NiFi instance and NiFi Registry instance have certificates which include the hostname (in DNS form) in the Subject Alternative Name section to allow RFC 6125 compliant hostname verification. There is a video tutorial for this process available here.

Highlighted

Re: SSLHandshakeException between NiFi and NiFi registry

Please specify which service this error is appearing on and provide full stacktraces from the respective logs to help diagnose the issue. You can also use the openssl s_client command to verify the certificates presented by each service.

Don't have an account?
Coming from Hortonworks? Activate your account here