[NIFI-6930] PutElasticSearchHttp 1.10.0 SSLSocketFactory not supported on JDK 9+

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Duplicate
• Affects Version/s: 1.10.0
• Fix Version/s: 1.12.0, 1.11.3
• Component/s: Extensions
• Environment: RHEL 8, JDK 11.0.4+11-LTS, Secure Cluster, ElasticSearch 7.5
• Assignee: Troy Melhase
• Reporter: Michael Percival
• Created: 05/Dec/19 15:22
• Updated: 05/Feb/21 18:07
• Resolved: 05/Feb/21 18:07

Description

Recently created a greenfield secure Nifi cluster with 6 servers. Muliple input methods including TCP/UDP TLS 1.2/Cleartext and ListenBeats (TLS 1.2). 

When attempting to now send these JSON formatted events to elasticsearch (7.5) via the PutElasticsearchHttp processor i get the following error:

 PutElasticsearchHttpRecord Failed to properly initialize Processor. If still scheduled to run, NiFi will attempt to initialize and run the Processor again after the 'Administrative Yield Duration' has elapsed. Failure is due to java.lang.UnsupportedOperationException: clientBuilder.sslSocketFactory(SSLSocketFactory) not supported on JDK 9+: java.lang.UnsupportedOperationException: clientBuilder.sslSocketFactory(SSLSocketFactory) not supported on JDK 9+

I have attempted using the various other ElasticSearch processors (PutElasticSearch5, PutElasticsearchHttpRecord, PutElasticSearch) but faced the same error on each. I have double checked all SSL configuration in the instance (controllors and key/trust stores) and found no inconsistencies, given these SSL controllors are also working for the ListenBeats and other functions it is unlikely these are a factor.

Found some possibly relevant articles:

https://stackoverflow.com/questions/50594350/alternative-to-sslsocketfactory-in-java10

https://www.bountysource.com/issues/73003979-java-11-can-t-use-ssl-clientbuilder-sslsocketfactory-sslsocketfactory-not-supported-on-jdk-9

 

 

Issue Links

• duplicates: NIFI-6927 PutElasticsearchHttp 1.10.0 with java 11 Fails to initialize due to "clientBuilder.sslSockerFactory(SSLSocketFactory) not supported on JDK 9+