[
https://issues.apache.org/jira/browse/NIFI-13570?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17867820#comment-17867820
]
ASF subversion and git services commented on NIFI-13570:
--------------------------------------------------------
Commit 79ac0c2d89107dc68aed224aad88a2236d8a7a76 in nifi's branch
refs/heads/main from Bryan Bende
[ https://gitbox.apache.org/repos/asf?p=nifi.git;h=79ac0c2d89 ]
NIFI-13570 Use NiFiProperties isHTTPSConfigured to determine if NAR Manager
should use https
This closes #9100
Signed-off-by: Joseph Witt <[email protected]>
> System test failures related to retrieving listing of NAR summaries
> -------------------------------------------------------------------
>
> Key: NIFI-13570
> URL: https://issues.apache.org/jira/browse/NIFI-13570
> Project: Apache NiFi
> Issue Type: Improvement
> Reporter: Bryan Bende
> Assignee: Bryan Bende
> Priority: Major
> Time Spent: 20m
> Remaining Estimate: 0h
>
> Some system tests are failing intermittently and the logs show repeatedly
> trying to list the NAR summaries and failing and then timing out:
> {code:java}
> 2024-07-22 07:20:43,558 INFO [Reconnect to Cluster]
> org.apache.nifi.nar.StandardNarManager Unable to retrieve NAR summaries from
> cluster coordinator: retrying until [2024-07-22T07:24:38.500Z]
> 2024-07-22 07:20:48,562 WARN [Reconnect to Cluster]
> org.apache.nifi.nar.StandardNarManager Request execution failed HTTP Method
> [GET] URI [https://localhost:5671/nifi-api/controller/nar-manager/nars]:
> retrying
> {code}
> After adding the exception to the log message it shows the following:
> {code:java}
> Caused by: javax.net.ssl.SSLException: Unsupported or unrecognized SSL message
> at
> java.base/sun.security.ssl.SSLSocketInputRecord.handleUnknownRecord(SSLSocketInputRecord.java:462)
> at
> java.base/sun.security.ssl.SSLSocketInputRecord.decode(SSLSocketInputRecord.java:175)
> at java.base/sun.security.ssl.SSLTransport.decode(SSLTransport.java:111)
> at
> java.base/sun.security.ssl.SSLSocketImpl.decode(SSLSocketImpl.java:1506)
> at
> java.base/sun.security.ssl.SSLSocketImpl.readHandshakeRecord(SSLSocketImpl.java:1421)
> at
> java.base/sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:455)
> at
> java.base/sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:426)
> at
> okhttp3.internal.connection.RealConnection.connectTls(RealConnection.kt:379)
> at
> okhttp3.internal.connection.RealConnection.establishProtocol(RealConnection.kt:337)
> at
> okhttp3.internal.connection.RealConnection.connect(RealConnection.kt:209)
> at
> okhttp3.internal.connection.ExchangeFinder.findConnection(ExchangeFinder.kt:226)
> at
> okhttp3.internal.connection.ExchangeFinder.findHealthyConnection(ExchangeFinder.kt:106)
> at okhttp3.internal.connection.ExchangeFinder.find(ExchangeFinder.kt:74)
> at
> okhttp3.internal.connection.RealCall.initExchange$okhttp(RealCall.kt:255)
> at
> okhttp3.internal.connection.ConnectInterceptor.intercept(ConnectInterceptor.kt:32)
> at
> okhttp3.internal.http.RealInterceptorChain.proceed(RealInterceptorChain.kt:109)
> at
> okhttp3.internal.cache.CacheInterceptor.intercept(CacheInterceptor.kt:95)
> at
> okhttp3.internal.http.RealInterceptorChain.proceed(RealInterceptorChain.kt:109)
> at
> okhttp3.internal.http.BridgeInterceptor.intercept(BridgeInterceptor.kt:83)
> at
> okhttp3.internal.http.RealInterceptorChain.proceed(RealInterceptorChain.kt:109)
> at
> okhttp3.internal.http.RetryAndFollowUpInterceptor.intercept(RetryAndFollowUpInterceptor.kt:76)
> at
> okhttp3.internal.http.RealInterceptorChain.proceed(RealInterceptorChain.kt:109)
> at
> okhttp3.internal.connection.RealCall.getResponseWithInterceptorChain$okhttp(RealCall.kt:201)
> at okhttp3.internal.connection.RealCall.execute(RealCall.kt:154)
> at
> org.apache.nifi.web.client.StandardWebClientService$StandardHttpRequestBodySpec.execute(StandardWebClientService.java:271)
> ... 9 common frames omitted
> Suppressed: javax.net.ssl.SSLException: Unsupported or unrecognized SSL
> message
> ... 34 common frames omitted {code}
> The system tests appear to run over http, but the nifi.properties files have
> the keystore and truststore properties set which seems to produce an
> SSLContext, and the NAR Manager is using the logic of SSLContext != null to
> trigger using https vs http.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
