Support Questions
Find answers, ask questions, and share your expertise

SSLHandshakeException between NiFi and NiFi registry

Dear Community members,

When NiFi and NiFi-registry running securely (ssl/https) , getting the below error when starting verson controlling in NiFi even after adding local NiFi user in the nifi-registry . Can someone please help .

Error

Unable to obtain listing of buckets: javax.net.ssl.SSLHandshakeException: java.security.cert.CertificateException: No subject alternative names present .

2 REPLIES 2

You should ensure that both the NiFi instance and NiFi Registry instance have certificates which include the hostname (in DNS form) in the Subject Alternative Name section to allow RFC 6125 compliant hostname verification. There is a video tutorial for this process available here.

Please specify which service this error is appearing on and provide full stacktraces from the respective logs to help diagnose the issue. You can also use the openssl s_client command to verify the certificates presented by each service.

Take a Tour of the Community
Don't have an account?
Your experience may be limited. Sign in to explore more.