Team,

I wonder if someone has NIFI running on Windows Server 2008 R2.
In my environment is works until I try to enable HTTPS, once it is set for 
HTTPS, I can't open NIFI on the browser anymore:

I know that the NIFI is running:

2016-02-08 07:11:31,528 INFO [main] org.eclipse.jetty.server.Server Started 
@41971ms
2016-02-08 07:11:32,464 INFO [main] org.apache.nifi.web.server.JettyServer NiFi 
has started. The UI is available at the following URLs:
2016-02-08 07:11:32,464 INFO [main] org.apache.nifi.web.server.JettyServer 
https://MyIP:2222/nifi
2016-02-08 07:11:32,464 INFO [main] org.apache.nifi.BootstrapListener 
Successfully initiated communication with Bootstrap
2016-02-08 07:11:32,464 INFO [main] org.apache.nifi.NiFi Controller 
initialization took 15595493981 nanoseconds.

Nifi.Properties:

# web properties #
nifi.web.war.directory=./lib
nifi.web.http.host=
nifi.web.http.port=
nifi.web.https.host=MyIP
nifi.web.https.port=2222
nifi.web.jetty.working.directory=./work/jetty
nifi.web.jetty.threads=200

# security properties #
nifi.sensitive.props.key=somekeyvalue
nifi.sensitive.props.algorithm=PBEWITHMD5AND256BITAES-CBC-OPENSSL
nifi.sensitive.props.provider=BC

nifi.security.keystore=D:/Installs/nifi-0.4.1/conf/server.jks
nifi.security.keystoreType=JKS
nifi.security.keystorePasswd=######
nifi.security.keyPasswd=######
nifi.security.truststore=D:/Installs/nifi-0.4.1/conf/server.jks
nifi.security.truststoreType=JKS
nifi.security.truststorePasswd=######
nifi.security.needClientAuth=true
nifi.security.user.credential.cache.duration=24 hours
nifi.security.user.authority.provider=file-provider
nifi.security.user.login.identity.provider=
nifi.security.support.new.account.requests=
# Valid Authorities include: 
ROLE_MONITOR,ROLE_DFM,ROLE_ADMIN,ROLE_PROVENANCE,ROLE_NIFI
nifi.security.anonymous.authorities=
nifi.security.ocsp.responder.url=
nifi.security.ocsp.responder.certificate=

I created a self-signed certificate:

keytool -genkey -alias server -keyalg RSA -keysize 2048 -keystore server.jks 
-dname "CN=server.com,OU=12, O=ORG, L=City, ST=Texas, C=US"
keytool -export -alias server -keystore server.jks -rfc -file server.cer





Any help is highly appreciated, please let me know if you need more details 
about it.


Thanks,


Alex

Reply via email to