Support Questions

Find answers, ask questions, and share your expertise

SSLHandshakeException between NiFi and NiFi registry

avatar
Contributor

Dear Community members,

When NiFi and NiFi-registry running securely (ssl/https) , getting the below error when starting verson controlling in NiFi even after adding local NiFi user in the nifi-registry . Can someone please help .

Error

Unable to obtain listing of buckets: javax.net.ssl.SSLHandshakeException: java.security.cert.CertificateException: No subject alternative names present .

2 REPLIES 2

avatar

You should ensure that both the NiFi instance and NiFi Registry instance have certificates which include the hostname (in DNS form) in the Subject Alternative Name section to allow RFC 6125 compliant hostname verification. There is a video tutorial for this process available here.

avatar

Please specify which service this error is appearing on and provide full stacktraces from the respective logs to help diagnose the issue. You can also use the openssl s_client command to verify the certificates presented by each service.