[
https://issues.apache.org/jira/browse/HBASE-25498?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
wenhao updated HBASE-25498:
---------------------------
Description:
When I configured https for the HBase web UI according to the document(set
{{hbase.ssl.enabled}} to {{true}} in _hbase-site.xml_), there are the following
errors:
{quote}2021-01-29 11:25:19,360 ERROR [main] master.HMasterCommandLine: Master
exiting2021-01-29 11:25:19,360 ERROR [main] master.HMasterCommandLine: Master
exitingjava.lang.RuntimeException: Failed construction of Master: class
org.apache.hadoop.hbase.master.HMaster. at
org.apache.hadoop.hbase.master.HMaster.constructMaster(HMaster.java:2910) at
org.apache.hadoop.hbase.master.HMasterCommandLine.startMaster(HMasterCommandLine.java:236)
at
org.apache.hadoop.hbase.master.HMasterCommandLine.run(HMasterCommandLine.java:140)
at org.apache.hadoop.util.ToolRunner.run(ToolRunner.java:76) at
org.apache.hadoop.hbase.util.ServerCommandLine.doMain(ServerCommandLine.java:149)
at org.apache.hadoop.hbase.master.HMaster.main(HMaster.java:2921)Caused by:
java.io.IOException: Problem starting http server at
org.apache.hadoop.hbase.http.HttpServer.start(HttpServer.java:1006) at
org.apache.hadoop.hbase.http.InfoServer.start(InfoServer.java:100) at
org.apache.hadoop.hbase.regionserver.HRegionServer.putUpWebUI(HRegionServer.java:2015)
at
org.apache.hadoop.hbase.regionserver.HRegionServer.<init>(HRegionServer.java:627)
at org.apache.hadoop.hbase.master.HMaster.<init>(HMaster.java:472) at
sun.reflect.NativeConstructorAccessorImpl.newInstance0(Native Method) at
sun.reflect.NativeConstructorAccessorImpl.newInstance(NativeConstructorAccessorImpl.java:62)
at
sun.reflect.DelegatingConstructorAccessorImpl.newInstance(DelegatingConstructorAccessorImpl.java:45)
at java.lang.reflect.Constructor.newInstance(Constructor.java:423) at
org.apache.hadoop.hbase.master.HMaster.constructMaster(HMaster.java:2903) ... 5
moreCaused by: java.lang.IllegalStateException: no valid keystore
{quote}
According to the following link
(https://community.cloudera.com/t5/Community-Articles/Enable-HTTPS-SSL-for-HBASE-Master-UI/ta-p/247031),
I found that SSL certificate and SSL configuration are required. In the
configuration document of hbase, we do not need to write a detailed
configuration process, but we need to be reminded: only modifying the
parameters according to the configuration steps will not take effect.
I think we need to add hints to the document(Please prepare SSL certificate and
ssl configuration file in advance)：
{quote}
h3. 59.1. Using Secure HTTP (HTTPS) for the Web UI
A default HBase install uses insecure HTTP connections for Web UIs for the
master and region servers. To enable secure HTTP (HTTPS) connections instead,
set {{hbase.ssl.enabled}} to {{true}} in _hbase-site.xml(Please prepare SSL
certificate and ssl configuration file in advance)_.
{quote}
was:
When I configured https for the HBase web UI according to the document(set
{{hbase.ssl.enabled}} to {{true}} in _hbase-site.xml_), there are the following
errors:
{quote}2021-01-29 11:25:19,360 ERROR [main] master.HMasterCommandLine: Master
exiting2021-01-29 11:25:19,360 ERROR [main] master.HMasterCommandLine: Master
exitingjava.lang.RuntimeException: Failed construction of Master: class
org.apache.hadoop.hbase.master.HMaster. at
org.apache.hadoop.hbase.master.HMaster.constructMaster(HMaster.java:2910) at
org.apache.hadoop.hbase.master.HMasterCommandLine.startMaster(HMasterCommandLine.java:236)
at
org.apache.hadoop.hbase.master.HMasterCommandLine.run(HMasterCommandLine.java:140)
at org.apache.hadoop.util.ToolRunner.run(ToolRunner.java:76) at
org.apache.hadoop.hbase.util.ServerCommandLine.doMain(ServerCommandLine.java:149)
at org.apache.hadoop.hbase.master.HMaster.main(HMaster.java:2921)Caused by:
java.io.IOException: Problem starting http server at
org.apache.hadoop.hbase.http.HttpServer.start(HttpServer.java:1006) at
org.apache.hadoop.hbase.http.InfoServer.start(InfoServer.java:100) at
org.apache.hadoop.hbase.regionserver.HRegionServer.putUpWebUI(HRegionServer.java:2015)
at
org.apache.hadoop.hbase.regionserver.HRegionServer.<init>(HRegionServer.java:627)
at org.apache.hadoop.hbase.master.HMaster.<init>(HMaster.java:472) at
sun.reflect.NativeConstructorAccessorImpl.newInstance0(Native Method) at
sun.reflect.NativeConstructorAccessorImpl.newInstance(NativeConstructorAccessorImpl.java:62)
at
sun.reflect.DelegatingConstructorAccessorImpl.newInstance(DelegatingConstructorAccessorImpl.java:45)
at java.lang.reflect.Constructor.newInstance(Constructor.java:423) at
org.apache.hadoop.hbase.master.HMaster.constructMaster(HMaster.java:2903) ... 5
moreCaused by: java.lang.IllegalStateException: no valid keystore
{quote}
According to the following
link([https://community.cloudera.com/t5/Community-Articles/Enable-HTTPS-SSL-for-HBASE-Master-UI/ta-p/247031]),
I found that he needs to rely on hdfs to enable https. In the configuration
process of hbase, we do not need to write a detailed configuration process, but
do we need to be reminded that only modifying the parameters according to the
configuration steps will not take effect.
I think we need to add hints to the document(Please configure HTTPS for HDFS in
advance)：
{quote}
h3. 59.1. Using Secure HTTP (HTTPS) for the Web UI
A default HBase install uses insecure HTTP connections for Web UIs for the
master and region servers. To enable secure HTTP (HTTPS) connections instead,
set {{hbase.ssl.enabled}} to {{true}} in _hbase-site.xml(Please configure HTTPS
for HDFS in advance)_.
{quote}
> [Documentation] Incomplete configuration steps when using Secure HTTP (HTTPS)
> for the Web UI
> --------------------------------------------------------------------------------------------
>
> Key: HBASE-25498
> URL: https://issues.apache.org/jira/browse/HBASE-25498
> Project: HBase
> Issue Type: Bug
> Affects Versions: 2.0.0
> Reporter: wenhao
> Assignee: wenhao
> Priority: Trivial
> Attachments: HBASE-25498.001.patch.patch
>
>
> When I configured https for the HBase web UI according to the document(set
> {{hbase.ssl.enabled}} to {{true}} in _hbase-site.xml_), there are the
> following errors:
> {quote}2021-01-29 11:25:19,360 ERROR [main] master.HMasterCommandLine: Master
> exiting2021-01-29 11:25:19,360 ERROR [main] master.HMasterCommandLine: Master
> exitingjava.lang.RuntimeException: Failed construction of Master: class
> org.apache.hadoop.hbase.master.HMaster. at
> org.apache.hadoop.hbase.master.HMaster.constructMaster(HMaster.java:2910) at
> org.apache.hadoop.hbase.master.HMasterCommandLine.startMaster(HMasterCommandLine.java:236)
> at
> org.apache.hadoop.hbase.master.HMasterCommandLine.run(HMasterCommandLine.java:140)
> at org.apache.hadoop.util.ToolRunner.run(ToolRunner.java:76) at
> org.apache.hadoop.hbase.util.ServerCommandLine.doMain(ServerCommandLine.java:149)
> at org.apache.hadoop.hbase.master.HMaster.main(HMaster.java:2921)Caused by:
> java.io.IOException: Problem starting http server at
> org.apache.hadoop.hbase.http.HttpServer.start(HttpServer.java:1006) at
> org.apache.hadoop.hbase.http.InfoServer.start(InfoServer.java:100) at
> org.apache.hadoop.hbase.regionserver.HRegionServer.putUpWebUI(HRegionServer.java:2015)
> at
> org.apache.hadoop.hbase.regionserver.HRegionServer.<init>(HRegionServer.java:627)
> at org.apache.hadoop.hbase.master.HMaster.<init>(HMaster.java:472) at
> sun.reflect.NativeConstructorAccessorImpl.newInstance0(Native Method) at
> sun.reflect.NativeConstructorAccessorImpl.newInstance(NativeConstructorAccessorImpl.java:62)
> at
> sun.reflect.DelegatingConstructorAccessorImpl.newInstance(DelegatingConstructorAccessorImpl.java:45)
> at java.lang.reflect.Constructor.newInstance(Constructor.java:423) at
> org.apache.hadoop.hbase.master.HMaster.constructMaster(HMaster.java:2903) ...
> 5 moreCaused by: java.lang.IllegalStateException: no valid keystore
> {quote}
> According to the following link
> (https://community.cloudera.com/t5/Community-Articles/Enable-HTTPS-SSL-for-HBASE-Master-UI/ta-p/247031),
> I found that SSL certificate and SSL configuration are required. In the
> configuration document of hbase, we do not need to write a detailed
> configuration process, but we need to be reminded: only modifying the
> parameters according to the configuration steps will not take effect.
> I think we need to add hints to the document(Please prepare SSL certificate
> and ssl configuration file in advance)：
> {quote}
> h3. 59.1. Using Secure HTTP (HTTPS) for the Web UI
> A default HBase install uses insecure HTTP connections for Web UIs for the
> master and region servers. To enable secure HTTP (HTTPS) connections instead,
> set {{hbase.ssl.enabled}} to {{true}} in _hbase-site.xml(Please prepare SSL
> certificate and ssl configuration file in advance)_.
> {quote}
--
This message was sent by Atlassian Jira
(v8.3.4#803005)
