如何在Zeppelin中设置SSL

时间:2019-05-06 04:22:41

标签: ssl jetty apache-zeppelin

我正在尝试在Zeppelin中设置SSL,并在遵循instructions和所有相关的Google搜索之后,zeppelin服务状态表示可以,但是网络响应为ERR_CONNECTION_REFUSED

这些是我修改过的zeppelin-site.xml的一部分

<property>
  <name>zeppelin.ssl</name>
  <value>false</value>
  <description>Should SSL be used by the servers?</description>
</property>

<property>
  <name>zeppelin.ssl.client.auth</name>
  <value>false</value>
  <description>Should client authentication be used for SSL connections?</description>
</property>

<property>
  <name>zeppelin.ssl.keystore.path</name>
  <value>/opt/zeppelin/lib/keystore</value>
  <description>Path to keystore relative to Zeppelin configuration directory</description>
</property>

<property>
  <name>zeppelin.ssl.keystore.type</name>
  <value>JKS</value>
  <description>The format of the given keystore (e.g. JKS or PKCS12)</description>
</property>

<property>
  <name>zeppelin.ssl.keystore.password</name>
  <value><super secret password></value>
  <description>Keystore password. Can be obfuscated by the Jetty Password tool</description>
</property>

<property>
  <name>zeppelin.ssl.truststore.path</name>
  <value>/opt/zeppelin/lib/keystore</value>
  <description>Path to truststore relative to Zeppelin configuration directory. Defaults to the keystore path</description>
</property>

<property>
  <name>zeppelin.ssl.truststore.type</name>
  <value>JKS</value>
  <description>The format of the given truststore (e.g. JKS or PKCS12). Defaults to the same type as the keystore type</description>
</property>

这是服务状态,表示我正在运行,但实际上该网页返回错误:

● zeppelin.service - Zeppelin service
   Loaded: loaded (/etc/systemd/system/zeppelin.service; enabled; vendor preset: enabled)
   Active: active (running) since Thu 2019-05-09 18:26:41 UTC; 28s ago
  Process: 347 ExecStop=/opt/zeppelin/bin/zeppelin-daemon.sh stop (code=exited, status=0/SUCCESS)
  Process: 413 ExecStart=/opt/zeppelin/bin/zeppelin-daemon.sh start (code=exited, status=0/SUCCESS)
 Main PID: 441 (java)
    Tasks: 39 (limit: 4662)
   CGroup: /system.slice/zeppelin.service
           └─441 java -Dfile.encoding=UTF-8 -Xms1024m -Xmx1024m -XX:MaxPermSize=512m -Dlog4j.configuration=file:///opt/zeppelin/conf/log4j.properties -Dzeppelin.log.file=/opt/zeppelin/logs/zeppelin-zeppelin-myserver.log -cp ::/op

1 个答案:

答案 0 :(得分:0)

您应该将zeppelin.ssl属性设置为true:

<property>
   <name>zeppelin.ssl</name>
   <value>true</value>
   <description>Should SSL be used by the servers?</description>
</property>