Support Questions

Find answers, ask questions, and share your expertise
Announcements
Celebrating as our community reaches 100,000 members! Thank you!

Secure Nifi Registry not working on Mac (but works on Windows)

avatar
Expert Contributor

Hi All,

 

I followed instructions from https://community.cloudera.com/t5/Community-Articles/Setting-Up-a-Secure-Apache-NiFi-Registry/ta-p/2... to set up secure Nifi Registry on my mac.

All steps were successful but when i open https link, it says - `

This site can’t provide a secure connection

localhost didn’t accept your login certificate, or one may not have been provided.

 

  • Try contacting the system admin.

ERR_BAD_SSL_CLIENT_AUTH_CERT` 

 

 

So after 2 days spent on it resolving with no luck, I am here to get help from community.

Before asking here, I made a test on a virtual windows machine and it works fine..

 

The issue with mac is that when i am adding the certificate to keychain by double clicking on the p12 file, Mac (Ventura 13.4.1 (22F82)) it says ""cannot add certificate to keychain unknown format"

 

So i tried changing the format using openssl - and tried to convert the certificate to .cer using this below command - "openssl pkcs12 -in CN=admin_OU=NiFi.p12 -clcerts -nokeys -out certificate.cer" it asked for a password and converted to .cer.  and then when i doubleclick on it now, it got added and i can see it in keychain of mac.

 

Now, even after it got added to keychain, when i open the https link, it throws same error 'ERR_BAD_SSL_CLIENT_AUTH_CERT'

 

As i tried to replicate the error in Windows, i get the same error if i don't add the certiifcate to keychain. But when i doubleclick and add it to keychain, it gets resolved. and i can access the https://

 

So I can confirm the culprit is mac adding certificate to keychain.. can someone help me resolve this issue in Mac.. 

 

 

1 REPLY 1

avatar
Expert Contributor

@alim Can you please suggest..