Hi John, I believe you may not be getting the responses to your question because you are not signed up to the mailing list or your spam filter is blocking them. I replied to your initial question last week. Please see below:
> Begin forwarded message: > > From: Andy LoPresto <[email protected]> > Subject: Re: Why is there no SSL Context Service for the GetSQS Processor? > Date: June 10, 2019 at 11:17:04 AM PDT > To: [email protected] > > Hi John, > > You’re right, it looks like the absence of an SSL Context Service was an > oversight from the initial contributor. If you’re comfortable opening a Jira > ticket [1] and documenting this need, we can start working on it. Thanks for > bringing this to our attention. > > In the meantime, if you need an immediate fix, I would suggest using an > ExecuteScript processor using Groovy with the AWS Java SDK (basically > copy/paste from the existing GetSQS processor body) (if you need help with > the code, let us know). > > The certificate issue would likely only be NiFi trusting the certificate > presented by the AWS SQS instance; unless you have mutual authentication TLS > enabled (which is uncommon in AWS for client connections), NiFi isn’t > presenting a certificate for the connection handshake negotiation. > > [1] > https://issues.apache.org/jira/browse/NIFI/?selectedTab=com.atlassian.jira.jira-projects-plugin:summary-panel > > <https://issues.apache.org/jira/browse/NIFI/?selectedTab=com.atlassian.jira.jira-projects-plugin:summary-panel> > > > > Andy LoPresto > [email protected] <mailto:[email protected]> > [email protected] > PGP Fingerprint: 70EC B3E5 98A6 5A3F D3C4 BACE 3C6E F65B 2F7D EF69 Andy LoPresto [email protected] [email protected] PGP Fingerprint: 70EC B3E5 98A6 5A3F D3C4 BACE 3C6E F65B 2F7D EF69 > On Jun 13, 2019, at 12:03 PM, [email protected] wrote: > > Hello nice nifi folks, > > I'm trying to use GetSQS to pull SQS messages from an SQS queue whose URL > begins with "https://sqs..." > > I get the following error when I run the processor: "Unable to execute HTTP > request: Remote host closed connection during handshake" > > And I'm having a hard time figuring out where nifi is getting its > certificates, or even which certificate it's presenting, if any. > > It's a curious thing that the GetSQS processor does NOT let you choose an SSL > Context Service, but other AWS-related processors such as "FetchS3Object" do > have the "SSL Context Service" property. > > I have valid AWS credentials. I can "FetchS3Object" all day long. But this > GetSQS processor isn't working at all and I suspect it's because of this > missing property. > > Does anyone know why it's missing or how I can work around it? > > Thanks!
