[jira] [Created] (NIFI-6930) PutElasticSearchHttp 1.10.0 SSLSocketFactory not supported on JDK 9+

["Michael Percival (Jira)" <ji...@apache.org>]

Michael Percival created NIFI-6930:
--------------------------------------

             Summary: PutElasticSearchHttp 1.10.0 SSLSocketFactory not supported on JDK 9+
                 Key: NIFI-6930
                 URL: https://issues.apache.org/jira/browse/NIFI-6930
             Project: Apache NiFi
          Issue Type: Bug
          Components: Extensions
    Affects Versions: 1.10.0
         Environment: RHEL 8, JDK 11.0.4+11-LTS, Secure Cluster, ElasticSearch 7.5
            Reporter: Michael Percival


Recently created a greenfield secure Nifi cluster with 6 servers. Muliple input methods including TCP/UDP TLS 1.2/Cleartext and ListenBeats (TLS 1.2). 

When attempting to now send these JSON formatted events to elasticsearch (7.5) via the PutElasticsearchHttp processor i get the following error:

 PutElasticsearchHttpRecord Failed to properly initialize Processor. If still scheduled to run, NiFi will attempt to initialize and run the Processor again after the 'Administrative Yield Duration' has elapsed. Failure is due to java.lang.UnsupportedOperationException: clientBuilder.sslSocketFactory(SSLSocketFactory) not supported on JDK 9+: java.lang.UnsupportedOperationException: clientBuilder.sslSocketFactory(SSLSocketFactory) not supported on JDK 9+

I have attempted using the various other ElasticSearch processors (PutElasticSearch5, PutElasticsearchHttpRecord, PutElasticSearch) but faced the same error on each. I have double checked all SSL configuration in the instance (controllors and key/trust stores) and found no inconsistencies, given these SSL controllors are also working for the ListenBeats and other functions it is unlikely these are a factor.

Found some possibly relevant articles:

[https://stackoverflow.com/questions/50594350/alternative-to-sslsocketfactory-in-java10]

[https://www.bountysource.com/issues/73003979-java-11-can-t-use-ssl-clientbuilder-sslsocketfactory-sslsocketfactory-not-supported-on-jdk-9]

 

 



--
This message was sent by Atlassian Jira
(v8.3.4#803005)