[jira] [Updated] (YARN-9935) SSLHandshakeException thrown when HTTPS is enabled in AM web server in one certain condition

2019-10-26 Thread Bibin Chundatt (Jira)


 [ 
https://issues.apache.org/jira/browse/YARN-9935?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Bibin Chundatt updated YARN-9935:
-
Component/s: (was: amrmproxy)

> SSLHandshakeException thrown when HTTPS is enabled in AM web server in one 
> certain condition
> 
>
> Key: YARN-9935
> URL: https://issues.apache.org/jira/browse/YARN-9935
> Project: Hadoop YARN
>  Issue Type: Bug
>Reporter: Sushanta Sen
>Priority: Major
>
> 【Precondition】:
> 1. Install the cluster
> 2. *{color:#4C9AFF}WebAppProxyServer service installed in 1 VM and RMs 
> installed in 2 VMs{color}*
> 3. Enables all the HTTPS configuration required 
> yarn.resourcemanager.application-https.policy
> STRICT
> yarn.app.mapreduce.am.webapp.https.enabled
> true
> yarn.app.mapreduce.am.webapp.https.client.auth
> true
> 4. RM HA enabled
> 5. *{color:#4C9AFF}Active RM is running in VM2, standby in VM1{color}*
> 6. Cluster should be up and running
> 【Test step】:
> 1.Submit an application
> 2. Open Application Master link from the applicationID from RM UI
> 【Expect Output】:
> No error should be thrown and JOb should be successful
> 【Actual Output】:
> SSLHandshakeException thrown , although Job is successful.
> "javax.net.ssl.SSLHandshakeException: 
> sun.security.validator.ValidatorException: PKIX path building failed: 
> sun.security.provider.certpath.SunCertPathBuilderException: unable to find 
> valid certification path to requested target"



--
This message was sent by Atlassian Jira
(v8.3.4#803005)

-
To unsubscribe, e-mail: yarn-issues-unsubscr...@hadoop.apache.org
For additional commands, e-mail: yarn-issues-h...@hadoop.apache.org



[jira] [Updated] (YARN-9935) SSLHandshakeException thrown when HTTPS is enabled in AM web server in one certain condition

2019-10-25 Thread Sushanta Sen (Jira)


 [ 
https://issues.apache.org/jira/browse/YARN-9935?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Sushanta Sen updated YARN-9935:
---
Description: 
【Precondition】:
1. Install the cluster
2. *{color:#4C9AFF}WebAppProxyServer service installed in 1 VM and RMs 
installed in 2 VMs{color}*
3. Enables all the HTTPS configuration required 
yarn.resourcemanager.application-https.policy
STRICT

yarn.app.mapreduce.am.webapp.https.enabled
true

yarn.app.mapreduce.am.webapp.https.client.auth
true

4. RM HA enabled
5. *{color:#4C9AFF}Active RM is running in VM2, standby in VM1{color}*
6. Cluster should be up and running

【Test step】:
1.Submit an application
2. Open Application Master link from the applicationID from RM UI

【Expect Output】:
No error should be thrown and JOb should be successful

【Actual Output】:
SSLHandshakeException thrown , although Job is successful.
"javax.net.ssl.SSLHandshakeException: 
sun.security.validator.ValidatorException: PKIX path building failed: 
sun.security.provider.certpath.SunCertPathBuilderException: unable to find 
valid certification path to requested target"


  was:
【Precondition】:
1. Install the cluster
2. WebAppProxyServer service installed in 1 VM and RMs installed in 2 VMs
3. Enables all the HTTPS configuration required 
yarn.resourcemanager.application-https.policy
STRICT

yarn.app.mapreduce.am.webapp.https.enabled
true

yarn.app.mapreduce.am.webapp.https.client.auth
true

4. RM HA enabled
5. *{color:#4C9AFF}Active RM is running in VM2, standby in VM1{color}*
6. Cluster should be up and running

【Test step】:
1.Submit an application
2. Open Application Master link from the applicationID from RM UI

【Expect Output】:
No error should be thrown and JOb should be successful

【Actual Output】:
SSLHandshakeException thrown , although Job is successful.
"javax.net.ssl.SSLHandshakeException: 
sun.security.validator.ValidatorException: PKIX path building failed: 
sun.security.provider.certpath.SunCertPathBuilderException: unable to find 
valid certification path to requested target"



> SSLHandshakeException thrown when HTTPS is enabled in AM web server in one 
> certain condition
> 
>
> Key: YARN-9935
> URL: https://issues.apache.org/jira/browse/YARN-9935
> Project: Hadoop YARN
>  Issue Type: Bug
>  Components: amrmproxy
>Reporter: Sushanta Sen
>Priority: Major
>
> 【Precondition】:
> 1. Install the cluster
> 2. *{color:#4C9AFF}WebAppProxyServer service installed in 1 VM and RMs 
> installed in 2 VMs{color}*
> 3. Enables all the HTTPS configuration required 
> yarn.resourcemanager.application-https.policy
> STRICT
> yarn.app.mapreduce.am.webapp.https.enabled
> true
> yarn.app.mapreduce.am.webapp.https.client.auth
> true
> 4. RM HA enabled
> 5. *{color:#4C9AFF}Active RM is running in VM2, standby in VM1{color}*
> 6. Cluster should be up and running
> 【Test step】:
> 1.Submit an application
> 2. Open Application Master link from the applicationID from RM UI
> 【Expect Output】:
> No error should be thrown and JOb should be successful
> 【Actual Output】:
> SSLHandshakeException thrown , although Job is successful.
> "javax.net.ssl.SSLHandshakeException: 
> sun.security.validator.ValidatorException: PKIX path building failed: 
> sun.security.provider.certpath.SunCertPathBuilderException: unable to find 
> valid certification path to requested target"



--
This message was sent by Atlassian Jira
(v8.3.4#803005)

-
To unsubscribe, e-mail: yarn-issues-unsubscr...@hadoop.apache.org
For additional commands, e-mail: yarn-issues-h...@hadoop.apache.org



[jira] [Updated] (YARN-9935) SSLHandshakeException thrown when HTTPS is enabled in AM web server in one certain condition

2019-10-25 Thread Sushanta Sen (Jira)


 [ 
https://issues.apache.org/jira/browse/YARN-9935?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Sushanta Sen updated YARN-9935:
---
Description: 
【Precondition】:
1. Install the cluster
2. WebAppProxyServer service installed in 1 VM and RMs installed in 2 VMs
3. Enables all the HTTPS configuration required 
yarn.resourcemanager.application-https.policy
STRICT

yarn.app.mapreduce.am.webapp.https.enabled
true

yarn.app.mapreduce.am.webapp.https.client.auth
true

4. RM HA enabled
5. *{color:#4C9AFF}Active RM is running in VM2, standby in VM1{color}*
6. Cluster should be up and running

【Test step】:
1.Submit an application
2. Open Application Master link from the applicationID from RM UI

【Expect Output】:
No error should be thrown and JOb should be successful

【Actual Output】:
SSLHandshakeException thrown , although Job is successful.
"javax.net.ssl.SSLHandshakeException: 
sun.security.validator.ValidatorException: PKIX path building failed: 
sun.security.provider.certpath.SunCertPathBuilderException: unable to find 
valid certification path to requested target"


  was:
【Precondition】:
1. Install the cluster
2. WebAppProxyServer service installed in 1 VM and RMs installed in 2 VMs
3. Enables all the HTTPS configuration required 
yarn.resourcemanager.application-https.policy
STRICT

yarn.app.mapreduce.am.webapp.https.enabled
true

yarn.app.mapreduce.am.webapp.https.client.auth
true

4. RM HA enabled
5. Active RM is running in VM2, standby in VM1
6. Cluster should be up and running

【Test step】:
1.Submit an application
2. Open Application Master link from the applicationID from RM UI

【Expect Output】:
No error should be thrown and JOb should be successful

【Actual Output】:
SSLHandshakeException thrown , although Job is successful.
"javax.net.ssl.SSLHandshakeException: 
sun.security.validator.ValidatorException: PKIX path building failed: 
sun.security.provider.certpath.SunCertPathBuilderException: unable to find 
valid certification path to requested target"



> SSLHandshakeException thrown when HTTPS is enabled in AM web server in one 
> certain condition
> 
>
> Key: YARN-9935
> URL: https://issues.apache.org/jira/browse/YARN-9935
> Project: Hadoop YARN
>  Issue Type: Bug
>  Components: amrmproxy
>Reporter: Sushanta Sen
>Priority: Major
>
> 【Precondition】:
> 1. Install the cluster
> 2. WebAppProxyServer service installed in 1 VM and RMs installed in 2 VMs
> 3. Enables all the HTTPS configuration required 
> yarn.resourcemanager.application-https.policy
> STRICT
> yarn.app.mapreduce.am.webapp.https.enabled
> true
> yarn.app.mapreduce.am.webapp.https.client.auth
> true
> 4. RM HA enabled
> 5. *{color:#4C9AFF}Active RM is running in VM2, standby in VM1{color}*
> 6. Cluster should be up and running
> 【Test step】:
> 1.Submit an application
> 2. Open Application Master link from the applicationID from RM UI
> 【Expect Output】:
> No error should be thrown and JOb should be successful
> 【Actual Output】:
> SSLHandshakeException thrown , although Job is successful.
> "javax.net.ssl.SSLHandshakeException: 
> sun.security.validator.ValidatorException: PKIX path building failed: 
> sun.security.provider.certpath.SunCertPathBuilderException: unable to find 
> valid certification path to requested target"



--
This message was sent by Atlassian Jira
(v8.3.4#803005)

-
To unsubscribe, e-mail: yarn-issues-unsubscr...@hadoop.apache.org
For additional commands, e-mail: yarn-issues-h...@hadoop.apache.org