Hi All,
I followed instructions from https://community.cloudera.com/t5/Community-Articles/Setting-Up-a-Secure-Apache-NiFi-Registry/ta-p/2... to set up secure Nifi Registry on my mac.
All steps were successful but when i open https link, it says - `
This site can’t provide a secure connection
localhost didn’t accept your login certificate, or one may not have been provided.
- Try contacting the system admin.
ERR_BAD_SSL_CLIENT_AUTH_CERT`
So after 2 days spent on it resolving with no luck, I am here to get help from community.
Before asking here, I made a test on a virtual windows machine and it works fine..
The issue with mac is that when i am adding the certificate to keychain by double clicking on the p12 file, Mac (Ventura 13.4.1 (22F82)) it says ""cannot add certificate to keychain unknown format"
So i tried changing the format using openssl - and tried to convert the certificate to .cer using this below command - "openssl pkcs12 -in CN=admin_OU=NiFi.p12 -clcerts -nokeys -out certificate.cer" it asked for a password and converted to .cer. and then when i doubleclick on it now, it got added and i can see it in keychain of mac.
Now, even after it got added to keychain, when i open the https link, it throws same error 'ERR_BAD_SSL_CLIENT_AUTH_CERT'
As i tried to replicate the error in Windows, i get the same error if i don't add the certiifcate to keychain. But when i doubleclick and add it to keychain, it gets resolved. and i can access the https://
So I can confirm the culprit is mac adding certificate to keychain.. can someone help me resolve this issue in Mac..