Support Questions

Find answers, ask questions, and share your expertise

Secure Nifi Registry not working on Mac (but works on Windows)

avatar
Expert Contributor

Hi All,

 

I followed instructions from https://community.cloudera.com/t5/Community-Articles/Setting-Up-a-Secure-Apache-NiFi-Registry/ta-p/2... to set up secure Nifi Registry on my mac.

All steps were successful but when i open https link, it says - `

This site can’t provide a secure connection

localhost didn’t accept your login certificate, or one may not have been provided.

 

  • Try contacting the system admin.

ERR_BAD_SSL_CLIENT_AUTH_CERT` 

 

 

So after 2 days spent on it resolving with no luck, I am here to get help from community.

Before asking here, I made a test on a virtual windows machine and it works fine..

 

The issue with mac is that when i am adding the certificate to keychain by double clicking on the p12 file, Mac (Ventura 13.4.1 (22F82)) it says ""cannot add certificate to keychain unknown format"

 

So i tried changing the format using openssl - and tried to convert the certificate to .cer using this below command - "openssl pkcs12 -in CN=admin_OU=NiFi.p12 -clcerts -nokeys -out certificate.cer" it asked for a password and converted to .cer.  and then when i doubleclick on it now, it got added and i can see it in keychain of mac.

 

Now, even after it got added to keychain, when i open the https link, it throws same error 'ERR_BAD_SSL_CLIENT_AUTH_CERT'

 

As i tried to replicate the error in Windows, i get the same error if i don't add the certiifcate to keychain. But when i doubleclick and add it to keychain, it gets resolved. and i can access the https://

 

So I can confirm the culprit is mac adding certificate to keychain.. can someone help me resolve this issue in Mac.. 

 

 

1 REPLY 1

avatar
Expert Contributor

@alim Can you please suggest..