Hi Kevin, Thank you for your help, always helpful with your comments. I made it work finally, as you said, it wasn't rewriting properly the response from Knox so the second petition Presto was doing was breaking. After applying a filter to the first response, and rewriting it properly, it worked. Thanks!
On Fri, 3 May 2019 at 18:28, Kevin Risden <kris...@apache.org> wrote: > Might want to try tcpdump and see the request/responses between the > different components. Maybe you aren't proxying something you should be? > > Figure out where this error is coming from "error "Unsupported or > unrecognized SSL message" that usually comes when trying to use HTTPS with > a non HTTP." if it is coming from presto-cli it means something isn't being > proxied I think. If it is in Knox then you probably have rewrite rules not > correct somewhere. The location of that error message will be helpful for > you to figure out what to look at next. > > Kevin Risden > > > On Fri, May 3, 2019 at 1:24 PM Odon Copon <odonco...@gmail.com> wrote: > >> Hi Kevin, >> Yup, that's most likely. Is there anything in particular that you know >> that could be causing that issue? Is there any heard or something in >> particular that could make that to happen? >> I'm not talking about Presto, but about requests in general. >> Thanks. >> >> On Fri, 3 May 2019 at 18:09, Kevin Risden <kris...@apache.org> wrote: >> >>> Doesn't sound like a Knox problem if it works with curl. Sounds like >>> presto-cli is doing something wrong. >>> >>> Kevin Risden >>> >>> >>> On Fri, May 3, 2019 at 1:05 PM Odon Copon <odonco...@gmail.com> wrote: >>> >>>> A quick update. Using curl, it works fine with http or https, but when >>>> using presto-cli it tries to use HTTPS between Knox and Presto when it >>>> should not, and I don't know why Knox is doing that. >>>> >>>> >>>> On Fri, 3 May 2019 at 12:09, Odon Copon <odonco...@gmail.com> wrote: >>>> >>>>> I have been checking this lately, and I have managed to make it work, >>>>> but I'm having some issues when using HTTPS with Knox. >>>>> When I run a curl command to Knox (with HTTP), that uses a topology >>>>> with a Presto service, it works fine, but when I use Presto CLI, for some >>>>> reason it adds HTTPS to the connection between Knox and Presto. >>>>> At the moment I have user -> Knox -> Presto, and when using HTTP, the >>>>> following happens: user --http--> Knox --http--> Presto, and that works >>>>> fine, but when using HTTPS I was expecting to have user --https--> Knox >>>>> --http--> Presto, so the first part between the user and Knox uses HTTPS >>>>> and the next one, between Knox and Presto uses HTTP. But that's not the >>>>> case, and I end having user --https--> Knox --https--> Presto so I get and >>>>> error "Unsupported or unrecognized SSL message" that usually comes when >>>>> trying to use HTTPS with a non HTTP. >>>>> >>>>> I checked my service, and it's using serviceUrl[service] so it >>>>> shouldn't be replacing the protocol for https. >>>>> Any idea about what could be causing the issue? >>>>> Thanks. >>>>> >>>>> On Fri, 26 Apr 2019 at 15:03, Odon Copon <odonco...@gmail.com> wrote: >>>>> >>>>>> One of the issues I'm facing is that per example with Hive I could >>>>>> use httpPath to specify the knox path (gateway/topology, etc) but I don't >>>>>> know if that's something from Hive specifically or something it can be >>>>>> replicated with Presto. >>>>>> Thanks >>>>>> >>>>>> On Thu, 25 Apr 2019, 18:22 Kevin Risden, <kris...@apache.org> wrote: >>>>>> >>>>>>> Another doubt regarding all this, would Knox be able to send to >>>>>>>> Presto the credentials used when performing the authentication? >>>>>>> >>>>>>> >>>>>>> There is a lot of flexibility here depending what needs to be done. >>>>>>> Knox can pass through authentication or add things like doAs or do >>>>>>> something completely custom with a custom dispatch. >>>>>>> >>>>>>> >>>>>>> Kevin Risden >>>>>>> >>>>>>> >>>>>>> On Mon, Apr 22, 2019 at 2:51 PM Odon Copon <odonco...@gmail.com> >>>>>>> wrote: >>>>>>> >>>>>>>> Hi Kevin, >>>>>>>> I haven't found much information about the Rest API, just the >>>>>>>> following, >>>>>>>> https://github.com/prestodb/presto/tree/master/presto-docs/src/main/sphinx/rest >>>>>>>> that >>>>>>>> doesn't seem to contain anything useful and the Presto headers from the >>>>>>>> code, >>>>>>>> https://github.com/prestosql/presto/blob/master/presto-client/src/main/java/io/prestosql/client/PrestoHeaders.java >>>>>>>> . >>>>>>>> Also found some info about using jdbc to connect to Presto: >>>>>>>> https://prestodb.github.io/docs/current/installation/jdbc.html. >>>>>>>> >>>>>>>> Another doubt regarding all this, would Knox be able to send to >>>>>>>> Presto the credentials used when performing the authentication? >>>>>>>> Thanks. >>>>>>>> >>>>>>>> On Mon, 22 Apr 2019 at 19:11, Kevin Risden <kris...@apache.org> >>>>>>>> wrote: >>>>>>>> >>>>>>>>> Not sure. I don't know what the endpoints for Presto are. From the >>>>>>>>> link you provided it looks like it could be possible. There was a >>>>>>>>> Knox Jira >>>>>>>>> issue opened (and closed by that same user) about Presto [1]. So I >>>>>>>>> would >>>>>>>>> guess it works but there isn't anything included in Knox today. >>>>>>>>> >>>>>>>>> [1] https://issues.apache.org/jira/browse/KNOX-1163 >>>>>>>>> >>>>>>>>> Kevin Risden >>>>>>>>> >>>>>>>>> >>>>>>>>> On Mon, Apr 22, 2019 at 2:07 PM Odon Copon <odonco...@gmail.com> >>>>>>>>> wrote: >>>>>>>>> >>>>>>>>>> Hi, >>>>>>>>>> Is there any way of making Knox work with Presto so it can >>>>>>>>>> authorize the access to Presto or redirect LDAP credentials to >>>>>>>>>> Presto? >>>>>>>>>> The only information I have seen is the following link: >>>>>>>>>> https://github.com/prestodb/presto/issues/5643 >>>>>>>>>> >>>>>>>>>> Thanks >>>>>>>>>> >>>>>>>>>
