You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@nifi.apache.org by "David Handermann (Jira)" <ji...@apache.org> on 2021/02/05 18:08:00 UTC
[jira] [Resolved] (NIFI-6930) PutElasticSearchHttp 1.10.0
SSLSocketFactory not supported on JDK 9+
[ https://issues.apache.org/jira/browse/NIFI-6930?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
David Handermann resolved NIFI-6930.
------------------------------------
Fix Version/s: 1.12.0
1.11.3
Resolution: Duplicate
Closing duplicate of resolved NIFI-6927.
> PutElasticSearchHttp 1.10.0 SSLSocketFactory not supported on JDK 9+
> --------------------------------------------------------------------
>
> Key: NIFI-6930
> URL: https://issues.apache.org/jira/browse/NIFI-6930
> Project: Apache NiFi
> Issue Type: Bug
> Components: Extensions
> Affects Versions: 1.10.0
> Environment: RHEL 8, JDK 11.0.4+11-LTS, Secure Cluster, ElasticSearch 7.5
> Reporter: Michael Percival
> Assignee: Troy Melhase
> Priority: Major
> Fix For: 1.11.3, 1.12.0
>
>
> Recently created a greenfield secure Nifi cluster with 6 servers. Muliple input methods including TCP/UDP TLS 1.2/Cleartext and ListenBeats (TLS 1.2).
> When attempting to now send these JSON formatted events to elasticsearch (7.5) via the PutElasticsearchHttp processor i get the following error:
> PutElasticsearchHttpRecord Failed to properly initialize Processor. If still scheduled to run, NiFi will attempt to initialize and run the Processor again after the 'Administrative Yield Duration' has elapsed. Failure is due to java.lang.UnsupportedOperationException: clientBuilder.sslSocketFactory(SSLSocketFactory) not supported on JDK 9+: java.lang.UnsupportedOperationException: clientBuilder.sslSocketFactory(SSLSocketFactory) not supported on JDK 9+
> I have attempted using the various other ElasticSearch processors (PutElasticSearch5, PutElasticsearchHttpRecord, PutElasticSearch) but faced the same error on each. I have double checked all SSL configuration in the instance (controllors and key/trust stores) and found no inconsistencies, given these SSL controllors are also working for the ListenBeats and other functions it is unlikely these are a factor.
> Found some possibly relevant articles:
> [https://stackoverflow.com/questions/50594350/alternative-to-sslsocketfactory-in-java10]
> [https://www.bountysource.com/issues/73003979-java-11-can-t-use-ssl-clientbuilder-sslsocketfactory-sslsocketfactory-not-supported-on-jdk-9]
>
>
--
This message was sent by Atlassian Jira
(v8.3.4#803005)