iginte REST API using HTTPS

[Shesha Nanda <sh...@gmail.com>]

Hi,

I am trying add ssl security for the ignite to access iginte REST API using
HTTPS. I have fallowed below steps:

I have enabled the ssl by adding below configurations.

        <property name="connectorConfiguration">
            <bean
class="org.apache.ignite.configuration.ConnectorConfiguration">
                <property name="jettyPath"
value="/home/test/jetty-server.xml" />
                <property name="sslEnabled" value="true"/>

                <property name="sslClientAuth" value="true"/>
            </bean>
        </property>

            <property name="sslContextFactory">
                  <bean class="org.apache.ignite.ssl.SslContextFactory">
                        <property name="protocol" value="SSL"/>
                        <property name="keyStoreFilePath"
value="/opt/ssl/ignite-keystore.jks" />
                        <property name="keyStorePassword" value="test1234"
/>
                        <property name="trustStoreFilePath"
value="/opt/ssl/ignite-truststore.jks" />
                        <property name="trustStorePassword"
value="test1234" />
                  </bean>
            </property>


I am able to see [authentication=off, tls/ssl=on]  in the logs.


Getting below error when I tried to access REST API using HTTPS request .

curl https://localhost:8443/ignite?cmd=version
curl: (35) SSL received a record that exceeded the maximum permissible
length.

If i try with http it's working
curl http://localhost:8080/ignite?cmd=version


Please let me know the configurations to enable SSL and access REST API
using HTTPS

-- 
*Regards*
*Sheshananda Naidu,*
*+91-9035063060*

Re: iginte REST API using HTTPS

[Ilya Kasnacheev <il...@gmail.com>]

Hello!

This sounds more like a Jetty issue. Having said that, I doubt that Jetty
will be able to use Ignite's sslContextFactory

See the jetty's configuration:
https://www.eclipse.org/jetty/documentation/current/configuring-ssl.html#configuring-sslcontextfactory

Regards,
-- 
Ilya Kasnacheev


вт, 4 дек. 2018 г. в 05:53, Shesha Nanda <sh...@gmail.com>:

> Hi,
>
> I am trying add ssl security for the ignite to access iginte REST API
> using HTTPS. I have fallowed below steps:
>
> I have enabled the ssl by adding below configurations.
>
>         <property name="connectorConfiguration">
>             <bean
> class="org.apache.ignite.configuration.ConnectorConfiguration">
>                 <property name="jettyPath"
> value="/home/test/jetty-server.xml" />
>                 <property name="sslEnabled" value="true"/>
>
>                 <property name="sslClientAuth" value="true"/>
>             </bean>
>         </property>
>
>             <property name="sslContextFactory">
>                   <bean class="org.apache.ignite.ssl.SslContextFactory">
>                         <property name="protocol" value="SSL"/>
>                         <property name="keyStoreFilePath"
> value="/opt/ssl/ignite-keystore.jks" />
>                         <property name="keyStorePassword" value="test1234"
> />
>                         <property name="trustStoreFilePath"
> value="/opt/ssl/ignite-truststore.jks" />
>                         <property name="trustStorePassword"
> value="test1234" />
>                   </bean>
>             </property>
>
>
> I am able to see [authentication=off, tls/ssl=on]  in the logs.
>
>
> Getting below error when I tried to access REST API using HTTPS request .
>
> curl https://localhost:8443/ignite?cmd=version
> curl: (35) SSL received a record that exceeded the maximum permissible
> length.
>
> If i try with http it's working
> curl http://localhost:8080/ignite?cmd=version
>
>
> Please let me know the configurations to enable SSL and access REST API
> using HTTPS
>
> --
> *Regards*
> *Sheshananda Naidu,*
> *+91-9035063060*
>