Here's a working example using separate signature files in the filesystem (e.g. 'filename.tgz' is the file and 'filename.sig' is a file containing the hash), and storing these in a distributed map cache. verify-sha256-hash.xml ... View more

Looks like a permissions issue with the encrypt-config tool. I'm guessing that you are running the script as a user who doesn't have the appropriate permissions to write/modify the /usr/hdf/current/nifi/conf directory (see here for an overview of the encrypt-config tool). A few things to try: 1) Take a look at the /usr/hdf/current/nifi/conf directory, and make sure this directory can be written to by the user you're running the tool as (ambari? make sure that user is in the appropriate group to read/write this directory). 2) Try running the encrypt-config.sh tool on its own (see the link above; do this on its own and not thru ambari) and see if you run into the same issue, and see if this gets you further in diagnosing the issue. ... View more

The error you're getting (ImportError: No module named rpm) is usually due to not having rpm-python installed. See the thread here for instructions on how to check and see if it is installed, and how to force a re-installation if necessary. ... View more