[ZEPPELIN-4149] ERR_CONNECTION_REFUSED after enabling SSL

• Type: Bug
• Status: Open
• Priority: Major
• Resolution: Unresolved
• Affects Version/s: 0.7.3, 0.8.0, 0.8.1
• Component/s: GUI, Homepage, security, zeppelin-server, zeppelin-web
• Labels: security
• Flags: Important
• Assignee: Unassigned
• Reporter: Michael Black
• Created: 09/May/19 20:36
• Updated: 27/Jun/19 17:31

Description

I'm trying to setup SSL in Zeppelin and after following the instructions to setup a self signed cert, the zeppelin service status says it's ok but the web response is ERR_CONNECTION_REFUSED

These are the parts of the zeppelin-site.xml I modified

{{<property> <name>zeppelin.ssl</name> <value>false</value> <description>Should SSL be used by the servers?</description> </property> <property> <name>zeppelin.ssl.client.auth</name> <value>false</value> <description>Should client authentication be used for SSL connections?</description> </property> <property> <name>zeppelin.ssl.keystore.path</name> <value>/opt/zeppelin/lib/keystore</value> <description>Path to keystore relative to Zeppelin configuration directory</description> </property> <property> <name>zeppelin.ssl.keystore.type</name> <value>JKS</value> <description>The format of the given keystore (e.g. JKS or PKCS12)</description> </property> <property> <name>zeppelin.ssl.keystore.password</name> <value><super secret password></value> <description>Keystore password. Can be obfuscated by the Jetty Password tool</description> </property> <property> <name>zeppelin.ssl.truststore.path</name> <value>/opt/zeppelin/lib/keystore</value> <description>Path to truststore relative to Zeppelin configuration directory. Defaults to the keystore path</description> </property> <property> <name>zeppelin.ssl.truststore.type</name> <value>JKS</value> <description>The format of the given truststore (e.g. JKS or PKCS12). Defaults to the same type as the keystore type</description> </property> }}

Then this is the service status, which says I'm running but in actuality the web page returns an error:

● zeppelin.service - Zeppelin service Loaded: loaded (/etc/systemd/system/zeppelin.service; enabled; vendor preset: enabled) Active: active (running) since Thu 2019-05-09 18:26:41 UTC; 28s ago Process: 347 ExecStop=/opt/zeppelin/bin/zeppelin-daemon.sh stop (code=exited, status=0/SUCCESS) Process: 413 ExecStart=/opt/zeppelin/bin/zeppelin-daemon.sh start (code=exited, status=0/SUCCESS) Main PID: 441 (java) Tasks: 39 (limit: 4662) CGroup: /system.slice/zeppelin.service └─441 java -Dfile.encoding=UTF-8 -Xms1024m -Xmx1024m -XX:MaxPermSize=512m -Dlog4j.configuration=file:///opt/zeppelin/conf/log4j.properties -Dzeppelin.log.file=/opt/zeppelin/logs/zeppelin-zeppelin-myserver.log -cp ::/op