Our Community is getting an upgrade! To get everything ready for the relaunch, we’ll be placing the site in read-only mode starting September 21st.
We really appreciate your understanding while we get things set up behind the scenes. Catch up on all the exciting details about the move here.
Need help or have questions? Drop us a line at [email protected]
Created on
08-21-2019
01:47 AM
- last edited on
08-21-2019
03:45 AM
by
VidyaSargur
Caused by: java.sql.SQLException: Connections using insecure transport are prohibited while --require_secure_transport=ON. at com.mysql.jdbc.SQLError.createSQLException(SQLError.java:965) at com.mysql.jdbc.MysqlIO.checkErrorPacket(MysqlIO.java:3973)
Created on 08-21-2019 01:55 AM - edited 08-21-2019 01:57 AM
As we see the mentioned message "require_secure_transport=ON" in your exception
which indicates that you might have configured your MySQL to allow secure connections. You can find that setting inside the "/etc/my.cnf"
Option-1). Hence ether you will need to disable that setting from mysql config and restart MySQL. If it is ON means it is enabled.
# grep 'require_secure_transport' /etc/my.cnf
require_secure_transport = OFF
# systemctl restart mysql.service
Option-2). OR you will need to Get the MySQL service certificate and then make sure that you import the MySQL certificate inside the AmbariServer truststore OR insie the JDK cacert in which your AmbariServer is running.
Example: Importing MySQL CA Certificate in AmbariServer's JDK Truststore :
# /usr/jdk64/jdk1.8.0_112/bin/keytool -import -file /tmp/mysql_cert.pem -alias mysql_ambari -keystore /usr/jdk64/jdk1.8.0_112/jre/lib/security/cacerts
The restart AmbariServer.
# ambari-server restart
.
Created on 08-21-2019 01:55 AM - edited 08-21-2019 01:57 AM
As we see the mentioned message "require_secure_transport=ON" in your exception
which indicates that you might have configured your MySQL to allow secure connections. You can find that setting inside the "/etc/my.cnf"
Option-1). Hence ether you will need to disable that setting from mysql config and restart MySQL. If it is ON means it is enabled.
# grep 'require_secure_transport' /etc/my.cnf
require_secure_transport = OFF
# systemctl restart mysql.service
Option-2). OR you will need to Get the MySQL service certificate and then make sure that you import the MySQL certificate inside the AmbariServer truststore OR insie the JDK cacert in which your AmbariServer is running.
Example: Importing MySQL CA Certificate in AmbariServer's JDK Truststore :
# /usr/jdk64/jdk1.8.0_112/bin/keytool -import -file /tmp/mysql_cert.pem -alias mysql_ambari -keystore /usr/jdk64/jdk1.8.0_112/jre/lib/security/cacerts
The restart AmbariServer.
# ambari-server restart
.
Created 08-21-2019 02:04 AM
if i run this command its asking keyword password: (what was the password)
/usr/jdk64/jdk1.8.0_112/bin/keytool -import -file /tmp/mysql_cert.pem -alias mysql_ambari -keystore /usr/jdk64/jdk1.8.0_112/jre/lib/security/cacerts
Enter keystore password:
Created 08-21-2019 02:05 AM
Password is "changeit" which is default cacert password.
Created 08-21-2019 02:06 AM
Thanks a lot
finally ambari server started