You are viewing a plain text version of this content. The canonical link for it is here.
Posted to user@ranger.apache.org by Gaurav Babbar <ga...@thalesgroup.com> on 2019/11/07 12:28:31 UTC
Ranger KMS SSL Issue

Hi,

After enabling ssl in ranger kms getting below error on clicking the test connection :


Connection Failed.
Unable to retrieve any files using given parameters, You can still save the repository and start creating policies, but you would not be able to use autocomplete for resource names. Check ranger_admin.log for more info.

org.apache.ranger.plugin.client.HadoopException: Exception while getting Kms Key List. URL : <a href="<a href="https://bpldev01-mst-01.cloud.in.guavus.com:9393/kms/v1/keys/names?doAs=ranger" target="_blank">https://bpldev01-mst-01.cloud.in.guavus.com:9393/kms/v1/keys/names?doAs=ranger</a>" target="_blank"><a href="https://bpldev01-mst-01.cloud.in.guavus.com:9393/kms/v1/keys/names?doAs=ranger</a" target="_blank">https://bpldev01-mst-01.cloud.in.guavus.com:9393/kms/v1/keys/names?doAs=ranger</a</a>>.
Exception while getting Kms Key List. URL : <a href="<a href="https://bpldev01-mst-01.cloud.in.guavus.com:9393/kms/v1/keys/names?doAs=ranger" target="_blank">https://bpldev01-mst-01.cloud.in.guavus.com:9393/kms/v1/keys/names?doAs=ranger</a>" target="_blank"><a href="https://bpldev01-mst-01.cloud.in.guavus.com:9393/kms/v1/keys/names?doAs=ranger</a" target="_blank">https://bpldev01-mst-01.cloud.in.guavus.com:9393/kms/v1/keys/names?doAs=ranger</a</a>>.
java.net.SocketException: java.security.NoSuchAlgorithmException: Error constructing implementation (algorithm: Default, provider: SunJSSE, class: sun.security.ssl.SSLContextImpl$DefaultSSLContext).
java.security.NoSuchAlgorithmException: Error constructing implementation (algorithm: Default, provider: SunJSSE, class: sun.security.ssl.SSLContextImpl$DefaultSSLContext).
Error constructing implementation (algorithm: Default, provider: SunJSSE, class: sun.security.ssl.SSLContextImpl$DefaultSSLContext).
Keystore was tampered with, or password was incorrect.
Password verification failed.

When executing curl command "<a href="<a href="https://bpldev01-mst-01.cloud.in.guavus.com:9393/kms/v1/keys/names?doAs=ranger" target="_blank">https://bpldev01-mst-01.cloud.in.guavus.com:9393/kms/v1/keys/names?doAs=ranger</a>" target="_blank"><a href="https://bpldev01-mst-01.cloud.in.guavus.com:9393/kms/v1/keys/names?doAs=ranger</a" target="_blank">https://bpldev01-mst-01.cloud.in.guavus.com:9393/kms/v1/keys/names?doAs=ranger</a</a>>'" it is running fine with appropriate keytab.

Any help would be appreciated.


Thanks and Regards,
Gaurav Babbar