[
https://issues.apache.org/jira/browse/NIFI-10932?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17679923#comment-17679923
]
Chris Sampson commented on NIFI-10932:
--------------------------------------
Likely also worth noting that my original description for this ticket was based
on using an {{alpine}} based image and then copying the {{nifi-toolkit}}
binary/config from the {{apache/nifi-toolkit}} image to then configure and use
(basically I want both Toolkit and NiPyApi within an image so I can run a
selection of configuration scripts within a container when my environment
starts up).
I've been through a few O/Ses (Alpine, Debian) JRE (OpenJDK, Temurin) and JDK
flavours to try and figure out what was going on, finally realising that it
likely isn't caused by
https://bugs.launchpad.net/ubuntu/+source/ca-certificates-java/+bug/1739631 but
the {{truststore.p12}} created by NiFi on startup (yay for adding {{export
JAVA_OPTS="-Xms128m -Xmx256m -Djavax.net.debug=ssl:all"}} to my container env
before running the Toolkit command to get the networking output.
Figured worth mentioning incase anyone else runs into this ticket through a
search and starts attempting to diagnose.
> NiFi Toolkit CLI cannot connect to NiFi - trustAnchors parameter must be
> non-empty
> ----------------------------------------------------------------------------------
>
> Key: NIFI-10932
> URL: https://issues.apache.org/jira/browse/NIFI-10932
> Project: Apache NiFi
> Issue Type: Bug
> Affects Versions: 1.19.0, 1.19.1
> Reporter: Chris Sampson
> Assignee: David Handermann
> Priority: Major
> Fix For: 1.20.0
>
>
> When running NiFi 1.19.0 using the {{apache/nifi}} docker image, the NiFi
> Toolkit is not able to connect to the running NiFi instance (with the default
> Single User Auth enabled).
> Having updated the NiFi Toolkit CLI properties file with the Truststore and
> Keystore details generated by NiFi (found within {{nifi.properties}}), then
> attempting to run a command using the NiFi Toolkit command line such as:
> {code:bash}
> /opt/nifi/nifi-toolkit-current/bin/cli.sh session set nifi
> /opt/nifi/nifi-toolkit-current/bin/cli.sh nifi get-services
> {code}
> The following error is returned:
> {quote}
> ERROR: Error executing command 'get-services' : Unexpected error:
> java.security.InvalidAlgorithmParameterException: the trustAnchors parameter
> must be non-empty
> {quote}
> This suggests something isn't working correctly with the NiFi Toolkit JVM
> process/configuration or such (e.g. the correct truststore is not being used,
> see https://www.baeldung.com/java-trustanchors-parameter-must-be-non-empty)
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
