- Subscribe to RSS Feed
- Mark Question as New
- Mark Question as Read
- Float this Question for Current User
- Bookmark
- Subscribe
- Mute
- Printer Friendly Page
Secure Nifi Registry not working on Mac (but works on Windows)
- Labels:
-
NiFi Registry
Created ‎06-27-2023 04:56 AM
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hi All,
I followed instructions from https://community.cloudera.com/t5/Community-Articles/Setting-Up-a-Secure-Apache-NiFi-Registry/ta-p/2... to set up secure Nifi Registry on my mac.
All steps were successful but when i open https link, it says - `
This site can’t provide a secure connection
localhost didn’t accept your login certificate, or one may not have been provided.
- Try contacting the system admin.
ERR_BAD_SSL_CLIENT_AUTH_CERT`
So after 2 days spent on it resolving with no luck, I am here to get help from community.
Before asking here, I made a test on a virtual windows machine and it works fine..
The issue with mac is that when i am adding the certificate to keychain by double clicking on the p12 file, Mac (Ventura 13.4.1 (22F82)) it says ""cannot add certificate to keychain unknown format"
So i tried changing the format using openssl - and tried to convert the certificate to .cer using this below command - "openssl pkcs12 -in CN=admin_OU=NiFi.p12 -clcerts -nokeys -out certificate.cer" it asked for a password and converted to .cer. and then when i doubleclick on it now, it got added and i can see it in keychain of mac.
Now, even after it got added to keychain, when i open the https link, it throws same error 'ERR_BAD_SSL_CLIENT_AUTH_CERT'
As i tried to replicate the error in Windows, i get the same error if i don't add the certiifcate to keychain. But when i doubleclick and add it to keychain, it gets resolved. and i can access the https://
So I can confirm the culprit is mac adding certificate to keychain.. can someone help me resolve this issue in Mac..
Created ‎06-27-2023 07:17 AM
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
@alim Can you please suggest..
