dhavalshah9131 opened a new pull request, #562:
URL: https://github.com/apache/ranger/pull/562

   
   
   ## What changes were proposed in this pull request?
   RANGER-5199 : Connection to Ranger KMS DB fails with secure MySQL/maria DB
   
   Facing below error while connecting to secure mysql/maria DB.
   `ERROR org.apache.hadoop.crypto.key.RangerKeyStoreProvider: [main]: ==> 
RangerKeyStoreProvider.reloadKeys() error : 
   java.lang.RuntimeException: Error while generating Ranger Master key, Error 
- Exception [EclipseLink-4002] (Eclipse Persistence Services - 
2.7.12.v20230209-e5c4074ef3): 
org.eclipse.persistence.exceptions.DatabaseException
   Internal Exception: com.mysql.cj.jdbc.exceptions.CommunicationsException: 
Communications link failure
   
   
   The last packet sent successfully to the server was 0 milliseconds ago. The 
driver has not received any packets from the server.
   Error Code: 0
        at 
org.apache.hadoop.crypto.key.RangerKeyStoreProvider.generateAndGetMasterKey(RangerKeyStoreProvider.java:296)
 ~[ranger-kms.jar:?]
        at 
org.apache.hadoop.crypto.key.RangerKeyStoreProvider.<init>(RangerKeyStoreProvider.java:263)
 ~[ranger-kms.jar:?]
        at 
org.apache.hadoop.crypto.key.RangerKeyStoreProvider$Factory.createProvider(RangerKeyStoreProvider.java:742)
 ~[ranger-kms.jar:?]
        at 
org.apache.hadoop.crypto.key.kms.server.KMSWebApp.createKeyProvider(KMSWebApp.java:111)
 ~[ranger-kms.jar:?]
        at 
org.apache.hadoop.crypto.key.kms.server.KMSWebApp.contextInitialized(KMSWebApp.java:175)
 ~[ranger-kms-2.4.0.7.3.1.200-83.jar:?] `
        
        
   We need  ranger-kms backend side fix to append ?useSSL=false when using 
mysql/mariadb databases.
   
   
   ## How was this patch tested?
   1.) Manual testing with secure DB
   2.) Successful build.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: dev-unsubscr...@ranger.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org

Reply via email to