Oh I did not get this is an external api. Yes because it is https, you should import the certificate. There was an update of OKHttpClient, which is more restrictive regarding certificate.
Le lun. 27 nov. 2023 à 10:52, <[email protected]> a écrit : > Hello > > Thank for reply, the weird thing it is until now, I don't use SSL context > and it is working. > > Good anyway, I will get the server certificate and add it in the > truststore and configure invokeHTTP to user SSL context also > > Thanks > > Minh > > > *Envoyé:* lundi 27 novembre 2023 à 10:48 > *De:* "Etienne Jouvin" <[email protected]> > *À:* [email protected] > *Objet:* Re: invokeHTTP SSL error NIFI : 1.23.2 > Hello; > > For sure, the certificate for the target server is not valid. > We had this issue also, because in the certificate the alias was missing. > Check your certificate, and I guess you will have to generate it again, > import it in the truststore. > > Regards > > Le lun. 27 nov. 2023 à 10:28, <[email protected]> a écrit : > >> >> Hello all, >> >> Since I've upgraded the nifi version from 1.18 to 1.23.2 - Java Version >> 11.0.17 >> I got the error concerning the invokeHTTP (GET >> https://api-eu.reputation.com/v3/ ..) even if I setup SSL Context or not >> >> Do you have informations about what has changed between the 2 nifi >> version ? >> >> In 1.18.0 this url (GET https://api-eu.reputation.com/v3/ ..) working >> with no issue >> >> Thanks for Helps >> >> Minh >> >> 2023-11-27 09:21:09,710 ERROR [Timer-Driven Process Thread-6] >> o.a.nifi.processors.standard.InvokeHTTP >> InvokeHTTP[id=da03ad8a-5a88-344c-a9b6-b88efb2e871b] Request Processing >> failed: >> StandardFlowFileRecord[uuid=2d75e8bc-1d2c-4d7d-938f-23c10bd5128d,claim=StandardContentClaim >> [resourceClaim=StandardResourceClaim[id=1701076362668-643397, >> container=repo0, section=325], offset=9405, >> length=165],offset=120,name=b8de3009-45e3-48e7-855d-8b252275f259,size=45] >> javax.net.ssl.SSLHandshakeException: PKIX path building failed: >> sun.security.provider.certpath.SunCertPathBuilderException: unable to find >> valid certification path to requested target >> at >> java.base/sun.security.ssl.Alert.createSSLException(Alert.java:131) >> at >> java.base/sun.security.ssl.TransportContext.fatal(TransportContext.java:369) >> at >> java.base/sun.security.ssl.TransportContext.fatal(TransportContext.java:312) >> at >> java.base/sun.security.ssl.TransportContext.fatal(TransportContext.java:307) >> at >> java.base/sun.security.ssl.CertificateMessage$T12CertificateConsumer.checkServerCerts(CertificateMessage.java:654) >> at >> java.base/sun.security.ssl.CertificateMessage$T12CertificateConsumer.onCertificate(CertificateMessage.java:473) >> at >> java.base/sun.security.ssl.CertificateMessage$T12CertificateConsumer.consume(CertificateMessage.java:369) >> at >> java.base/sun.security.ssl.SSLHandshake.consume(SSLHandshake.java:392) >> at >> java.base/sun.security.ssl.HandshakeContext.dispatch(HandshakeContext.java:478) >> at >> java.base/sun.security.ssl.HandshakeContext.dispatch(HandshakeContext.java:456) >> at >> java.base/sun.security.ssl.TransportContext.dispatch(TransportContext.java:199) >> at >> java.base/sun.security.ssl.SSLTransport.decode(SSLTransport.java:172) >> at >> java.base/sun.security.ssl.SSLSocketImpl.decode(SSLSocketImpl.java:1382) >> at >> java.base/sun.security.ssl.SSLSocketImpl.readHandshakeRecord(SSLSocketImpl.java:1295) >> at >> java.base/sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:416) >> at >> java.base/sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:388) >> at >> okhttp3.internal.connection.RealConnection.connectTls(RealConnection.kt:379) >> at >> okhttp3.internal.connection.RealConnection.establishProtocol(RealConnection.kt:337) >> at >> okhttp3.internal.connection.RealConnection.connect(RealConnection.kt:209) >> at >> okhttp3.internal.connection.ExchangeFinder.findConnection(ExchangeFinder.kt:226) >> at >> okhttp3.internal.connection.ExchangeFinder.findHealthyConnection(ExchangeFinder.kt:106) >> at >> okhttp3.internal.connection.ExchangeFinder.find(ExchangeFinder.kt:74) >> at >> okhttp3.internal.connection.RealCall.initExchange$okhttp(RealCall.kt:255) >> at >> okhttp3.internal.connection.ConnectInterceptor.intercept(ConnectInterceptor.kt:32) >> at >> okhttp3.internal.http.RealInterceptorChain.proceed(RealInterceptorChain.kt:109) >> at >> okhttp3.internal.cache.CacheInterceptor.intercept(CacheInterceptor.kt:95) >> at >> okhttp3.internal.http.RealInterceptorChain.proceed(RealInterceptorChain.kt:109) >> at >> okhttp3.internal.http.BridgeInterceptor.intercept(BridgeInterceptor.kt:83) >> at >> okhttp3.internal.http.RealInterceptorChain.proceed(RealInterceptorChain.kt:109) >> at >> okhttp3.internal.http.RetryAndFollowUpInterceptor.intercept(RetryAndFollowUpInterceptor.kt:76) >> at >> okhttp3.internal.http.RealInterceptorChain.proceed(RealInterceptorChain.kt:109) >> at >> okhttp3.internal.connection.RealCall.getResponseWithInterceptorChain$okhttp(RealCall.kt:201) >> at okhttp3.internal.connection.RealCall.execute(RealCall.kt:154) >> at >> org.apache.nifi.processors.standard.InvokeHTTP.onTrigger(InvokeHTTP.java:951) >> at >> org.apache.nifi.processor.AbstractProcessor.onTrigger(AbstractProcessor.java:27) >> at >> org.apache.nifi.controller.StandardProcessorNode.onTrigger(StandardProcessorNode.java:1361) >> at >> org.apache.nifi.controller.tasks.ConnectableTask.invoke(ConnectableTask.java:247) >> at >> org.apache.nifi.controller.scheduling.TimerDrivenSchedulingAgent$1.run(TimerDrivenSchedulingAgent.java:102) >> at org.apache.nifi.engine.FlowEngine$2.run(FlowEngine.java:110) >> at >> java.base/java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:515) >> at >> java.base/java.util.concurrent.FutureTask.runAndReset(FutureTask.java:305) >> at >> java.base/java.util.concurrent.ScheduledThreadPoolExecutor$ScheduledFutureTask.run(ScheduledThreadPoolExecutor.java:305) >> at >> java.base/java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1128) >> at >> java.base/java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:628) >> at java.base/java.lang.Thread.run(Thread.java:834) >> Caused by: sun.security.validator.ValidatorException: PKIX path building >> failed: sun.security.provider.certpath.SunCertPathBuilderException: unable >> to find valid certification path to requested target >> at >> java.base/sun.security.validator.PKIXValidator.doBuild(PKIXValidator.java:439) >> at >> java.base/sun.security.validator.PKIXValidator.engineValidate(PKIXValidator.java:306) >> at >> java.base/sun.security.validator.Validator.validate(Validator.java:264) >> at >> java.base/sun.security.ssl.X509TrustManagerImpl.validate(X509TrustManagerImpl.java:313) >> at >> java.base/sun.security.ssl.X509TrustManagerImpl.checkTrusted(X509TrustManagerImpl.java:222) >> at >> java.base/sun.security.ssl.X509TrustManagerImpl.checkServerTrusted(X509TrustManagerImpl.java:129) >> at >> java.base/sun.security.ssl.CertificateMessage$T12CertificateConsumer.checkServerCerts(CertificateMessage.java:638) >> >> >> > > >
