Created on 08-21-2019 01:47 AM - last edited on 08-21-2019 03:45 AM by VidyaSargur
Caused by: java.sql.SQLException: Connections using insecure transport are prohibited while --require_secure_transport=ON. at com.mysql.jdbc.SQLError.createSQLException(SQLError.java:965) at com.mysql.jdbc.MysqlIO.checkErrorPacket(MysqlIO.java:3973)
Created on 08-21-2019 01:55 AM - edited 08-21-2019 01:57 AM
As we see the mentioned message "require_secure_transport=ON" in your exception
which indicates that you might have configured your MySQL to allow secure connections. You can find that setting inside the "/etc/my.cnf"
Option-1). Hence ether you will need to disable that setting from mysql config and restart MySQL. If it is ON means it is enabled.
# grep 'require_secure_transport' /etc/my.cnf
require_secure_transport = OFF
# systemctl restart mysql.service
Option-2). OR you will need to Get the MySQL service certificate and then make sure that you import the MySQL certificate inside the AmbariServer truststore OR insie the JDK cacert in which your AmbariServer is running.
Example: Importing MySQL CA Certificate in AmbariServer's JDK Truststore :
# /usr/jdk64/jdk1.8.0_112/bin/keytool -import -file /tmp/mysql_cert.pem -alias mysql_ambari -keystore /usr/jdk64/jdk1.8.0_112/jre/lib/security/cacerts
The restart AmbariServer.
# ambari-server restart
.
Created on 08-21-2019 01:55 AM - edited 08-21-2019 01:57 AM
As we see the mentioned message "require_secure_transport=ON" in your exception
which indicates that you might have configured your MySQL to allow secure connections. You can find that setting inside the "/etc/my.cnf"
Option-1). Hence ether you will need to disable that setting from mysql config and restart MySQL. If it is ON means it is enabled.
# grep 'require_secure_transport' /etc/my.cnf
require_secure_transport = OFF
# systemctl restart mysql.service
Option-2). OR you will need to Get the MySQL service certificate and then make sure that you import the MySQL certificate inside the AmbariServer truststore OR insie the JDK cacert in which your AmbariServer is running.
Example: Importing MySQL CA Certificate in AmbariServer's JDK Truststore :
# /usr/jdk64/jdk1.8.0_112/bin/keytool -import -file /tmp/mysql_cert.pem -alias mysql_ambari -keystore /usr/jdk64/jdk1.8.0_112/jre/lib/security/cacerts
The restart AmbariServer.
# ambari-server restart
.
Created 08-21-2019 02:04 AM
if i run this command its asking keyword password: (what was the password)
/usr/jdk64/jdk1.8.0_112/bin/keytool -import -file /tmp/mysql_cert.pem -alias mysql_ambari -keystore /usr/jdk64/jdk1.8.0_112/jre/lib/security/cacerts
Enter keystore password:
Created 08-21-2019 02:05 AM
Password is "changeit" which is default cacert password.
Created 08-21-2019 02:06 AM
Thanks a lot
finally ambari server started