Guest User

Untitled

a guest
Jun 20th, 2018
130
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 2.21 KB | None | 0 0
  1. >> Created the key
  2.  
  3. keytool -genkey -alias hiveserver2 -keyalg RSA -keystore /tmp/hs2keystore.jks -keysize 2048
  4.  
  5. Enter keystore password: XXXXXXXX
  6. Re-enter new password: XXXXXXXX
  7. What is your first and last name?
  8. [Unknown]: localhost
  9. What is the name of your organizational unit?
  10. [Unknown]: myorg
  11. What is the name of your organization?
  12. [Unknown]: myorg
  13. What is the name of your City or Locality?
  14. [Unknown]: Herndon
  15. What is the name of your State or Province?
  16. [Unknown]: VA
  17. What is the two-letter country code for this unit?
  18. [Unknown]: US
  19. Is CN=localhost, OU=myorg, O=myorg, L=Herndon, ST=VA, C=US correct?
  20. [no]: yes
  21.  
  22. Enter key password for <hiveserver2>
  23. (RETURN if same as keystore password):
  24.  
  25. Warning:
  26. The JKS keystore uses a proprietary format. It is recommended to migrate to PKCS12 which is an industry standard format using "keytool -importkeystore -srckeystore /tmp/hs5keystore.jks -destkeystore /tmp/hs5keystore.jks -deststoretype pkcs12".
  27.  
  28.  
  29. >> Later exported the certificate
  30.  
  31. keytool -export -alias hiveserver2 -file hiveserver2.crt -keystore /tmp/hs2keystore.jks.
  32.  
  33.  
  34. >> Imported above certificated into truststore
  35.  
  36. keytool -import -trustcacerts -alias hiveserver2 -file hiveserver2.crt -keystore /tmp/truststore.jks
  37.  
  38. Edited /etc/hive/conf/hive-site.xml
  39.  
  40. <property>
  41. <name>hive.server2.use.SSL</name>
  42. <value>true</value>
  43. </property>
  44.  
  45. <property>
  46. <name>hive.server2.keystore.path</name>
  47. <value>/tmp/hs2keystore.jks</value>
  48. </property>
  49.  
  50. <property>
  51. <name>hive.server2.keystore.password</name>
  52. <value>xxxxxx</value>
  53. </property>
  54.  
  55. >> Restarted the hive servers,
  56. sudo stop hive-server2
  57. sudo stop hive-hcatalog-server
  58. sudo start hive-hcatalog-server
  59. sudo start hive-server2
  60.  
  61. >> Invoked beeline
  62. >> beeline
  63. >> beeline> !connect jdbc:hive2://localhost:10000/default;ssl=true;sslTrustStore=/tmp/truststore.jks;trustStorePassword=XXXXXX
  64. Connecting to jdbc:hive2://localhost:10000/default;ssl=true;sslTrustStore=/tmp/truststore.jks;trustStorePassword=1234567
  65. Enter username for jdbc:hive2://localhost:10000/default: hive
  66. Enter password for jdbc:hive2://localhost:10000/default: ****************.
  67. Connected to: Apache Hive (version 2.3.2-amzn-2)
  68. Driver: Hive JDBC (version 2.3.2-amzn-2)
Add Comment
Please, Sign In to add comment