SSL inspection and Talend on AWS

Claudio3 — Sat, 16 Nov 2024 03:16:27 GMT

Dear all,

I have an issue using talend on corporate network with s3 files; my corporate internet gatway is chaning the SSL/HTTPS certification path with custom CA trusted by domain computer.

That's ok for all component but aws sdk is performing a deep check on CA and the job fail with the following error.

Unable to execute HTTP request: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
com.amazonaws.SdkClientException: Unable to execute HTTP request: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
	at com.amazonaws.http.AmazonHttpClient$RequestExecutor.handleRetryableException(AmazonHttpClient.java:1134)
	at com.amazonaws.http.AmazonHttpClient$RequestExecutor.executeHelper(AmazonHttpClient.java:1080)
	at com.amazonaws.http.AmazonHttpClient$RequestExecutor.doExecute(AmazonHttpClient.java:745)
	at com.amazonaws.http.AmazonHttpClient$RequestExecutor.executeWithTimer(AmazonHttpClient.java:719)
	at com.amazonaws.http.AmazonHttpClient$RequestExecutor.execute(AmazonHttpClient.java:701)
	at com.amazonaws.http.AmazonHttpClient$RequestExecutor.access$500(AmazonHttpClient.java:669)
	at com.amazonaws.http.AmazonHttpClient$RequestExecutionBuilderImpl.execute(AmazonHttpClient.java:651)
	at com.amazonaws.http.AmazonHttpClient.execute(AmazonHttpClient.java:515)
	at com.amazonaws.services.s3.AmazonS3Client.invoke(AmazonS3Client.java:4443)
	at com.amazonaws.services.s3.AmazonS3Client.invoke(AmazonS3Client.java:4390)
	at com.amazonaws.services.s3.AmazonS3Client.invoke(AmazonS3Client.java:4384)
	at com.amazonaws.services.s3.AmazonS3Client.getS3AccountOwner(AmazonS3Client.java:932)
	at com.amazonaws.services.s3.AmazonS3Client.getS3AccountOwner(AmazonS3Client.java:922)

I've found a way to skip a strong https check, passing specific java options -Dcom.amazonaws.sdk.disableCertChecking=true as documented here.

Now, I want to found a way to set this parameter for my computer only: the cloud agent on production data must ignore this local override.

How can I achieve this goal on Talend Studio with Licensed Real time Big Data Edition ?

I have tried to set the property globally, but reployinh and running a job on a cloud engine the security warning appears on logs.

topic SSL inspection and Talend on AWS in Talend Studio

SSL inspection and Talend on AWS