Hello Experts, I have secured my three node nifi cluster and followed the links below:-
https://pierrevillard.com/2016/11/29/apache-nifi-1-1-0-secured-cluster-setup/ https://pierrevillard.com/tag/tls-toolkit/ The only difference is that I used the toolkit standalone mode to generate the required certs. Inspite of generating the client certificate with the below command, I see the following error on my browser:- "ERR_BAD_SSL_CLIENT_AUTH_CERT" Below are the commands used to generate the certificates and keystores:- tls-toolkit.sh standalone -n 'server10[1-3]xj.domain.com' -C 'CN=admin, OU=NIFIORG' -o. Client Cert:- tls-toolkit.sh standalone -n 'server101.domain.com' -C 'CN=admin, OU=NIFIORG' -o. Tried generating the client certificate using "localhost" as well instead of "server101.domain.com" but that did not help either. The cluster has come up successfully and listening on the SSL port.Also,the users.xml and authorizations.xml have been populated properly with the initial Admin whihc is "CN=admin, OU=NIFIORG" I imported the cert created in p12 format into the browser but everytime I try to access the UI,i get the same error. Tried regenerating the certs for all the nodes and created a fresh new client cert as well but that did not help. I could not see any error in the logs but at the same time there was no authentication request in the user logs for the user "CN=admin, OU=NIFIORG". Appreciate any pointers how to resolve this issue. -- View this message in context: http://apache-nifi-developer-list.39713.n7.nabble.com/ERR-BAD-SSL-CLIENT-AUTH-CERT-error-after-configuring-secure-cluster-tp16538.html Sent from the Apache NiFi Developer List mailing list archive at Nabble.com.
