[ 
https://issues.apache.org/jira/browse/YARN-9935?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Bibin Chundatt updated YARN-9935:
---------------------------------
    Component/s:     (was: amrmproxy)

> SSLHandshakeException thrown when HTTPS is enabled in AM web server in one 
> certain condition
> --------------------------------------------------------------------------------------------
>
>                 Key: YARN-9935
>                 URL: https://issues.apache.org/jira/browse/YARN-9935
>             Project: Hadoop YARN
>          Issue Type: Bug
>            Reporter: Sushanta Sen
>            Priority: Major
>
> 【Precondition】:
> 1. Install the cluster
> 2. *{color:#4C9AFF}WebAppProxyServer service installed in 1 VM and RMs 
> installed in 2 VMs{color}*
> 3. Enables all the HTTPS configuration required 
> <property><name>yarn.resourcemanager.application-https.policy</name>
> <value>STRICT</value></property>
> <property><name>yarn.app.mapreduce.am.webapp.https.enabled</name>
> <value>true</value></property>
> <property><name>yarn.app.mapreduce.am.webapp.https.client.auth</name>
> <value>true</value></property>
> 4. RM HA enabled
> 5. *{color:#4C9AFF}Active RM is running in VM2, standby in VM1{color}*
> 6. Cluster should be up and running
> 【Test step】:
> 1.Submit an application
> 2. Open Application Master link from the applicationID from RM UI
> 【Expect Output】:
> No error should be thrown and JOb should be successful
> 【Actual Output】:
> SSLHandshakeException thrown , although Job is successful.
> "javax.net.ssl.SSLHandshakeException: 
> sun.security.validator.ValidatorException: PKIX path building failed: 
> sun.security.provider.certpath.SunCertPathBuilderException: unable to find 
> valid certification path to requested target"



--
This message was sent by Atlassian Jira
(v8.3.4#803005)

---------------------------------------------------------------------
To unsubscribe, e-mail: yarn-issues-unsubscr...@hadoop.apache.org
For additional commands, e-mail: yarn-issues-h...@hadoop.apache.org

Reply via email to