Configuring an HTTPS connection with Talend on Linux server

[williaml]

Hi, I am new to Talend and I have given a task to connect Talend to an API which require in HTTPS connection.

I have download the certificate on place it in the cert store and I have configure Talend using the following setup:

It works on Windows device but I will need to use it in Linux environment.

What I have done so far is import it to the keystore in Linux server and change the configure above but it wont connect.

Next what I have done is copy the cacert file from windows machine to Linux server and place it in /etc/pki/tls/certs/cacerts and I have update the path and the password but it sill not able to connect.

Can I ask if someone had able to connect using Linux server?

[Denis_Segard]

Hello

What error do you get when running on Linux ? 
You may generate a SSL trace by adding the JVM property :

-Djavax.net.debug=all 

Kind regards
Denis

[williaml]

Thanks for the reply and this is the error I got:

[quentin-vigne]

Hi @williaml 

Did you try using this when running from linux ? 

-Djavax.net.ssl.trustStore=/etc/pki/tls/certs/cacerts

Also what you can do is inside a PreJob with a tJava is setup this command : 

System.setProperty("javax.net.ssl.trustStore", context.trust_store_location);

And put "C:/Users/username/myKeystore.keystore" or /etc/pki/tls/certs/cacerts depending of the environment you are running it from (with context variable)

Also make sure the user executing the job from linux / windows has access to the keystore 🙂

- Quentin

[edward53]

You've done a lot already

Spoiler

estate agents dagneham

nice work. One thing to check is whether Talend on Linux is using the correct Java and pointing to the right keystore. Sometimes setting the -Djavax.net.ssl.trustStore option directly helps. Hope you get it sorted!

[edward53]

To connect Talend to an API using HTTPS on a Linux server, make sure the correct keystore path is set. Verify that the certificate is properly imported into the keystore by using the keytool -list -keystore /path/to/keystore command. In Talend, update the trustStore path and password in the configuration. For example, the trustStore path should be set to /etc/pki/tls/certs/cacerts with the password as changeit. Ensure that the user running Talend has permission to access the keystore and trustStore files. Also, confirm that Java on the Linux server supports SSL/TLS. Finally, test the connection with tools like curl or openssl to ensure everything is working. If it’s still not connecting, recheck the certificate import or investigate any SSL/TLS issues in the logs.

Spoiler

Spoiler

[edward53]

To connect Talend to an API using HTTPS on a Linux server, make sure the correct keystore path is set. Verify that the certificate is properly imported into the keystore by using the keytool -list -keystore /path/to/keystore command. In Talend, update the trustStore path and password in the configuration. For example, the trustStore path should be set to /etc/pki/tls/certs/cacerts with the password as changeit. Ensure that the user running Talend has permission to access the keystore and trustStore files. Also, confirm that Java on the Linux server supports SSL/TLS. Finally, test the connection with tools like curl or openssl to ensure everything is working. If it’s still not connecting, recheck the certificate import or investigate any SSL/TLS issues in the logs.

Spoiler

estate agents dagenham

[williaml]

Hi, I did use this below

-Djavax.net.ssl.trustStore=/etc/pki/tls/certs/cacerts

your last message have remind me as user might not have access to that folder so what I did is ask user to create a folder and copy the cacerts files over and ask him to check.

Will update here and see if it works.