Cloudera Docs

Troubleshooting: Using custom SSL certs to connect to CDSW/CML workspaces

The migration script internally uses cdswctl which relies on systemwide configured certificates to establish connection with source and target workspaces. It must be ensured that SSL certs belonging to both source and target workspaces (if applicable) should be set up properly.

Set up for Linux(Ubuntu/Debian)

  1. Copy your CA to the directory /usr/local/share/ca-certificates/. Ensure that the CA file is in .crt format.
  2. Run the command: sudo cp foo.crt /usr/local/share/ca-certificates/foo.crt
  3. Update the CA store: sudo update-ca-certificates.

Set up for MacOS

  1. Navigate to Finder > Applications > Utilities > Keychain Access.
  2. Select System in the left-hand column.
  3. Open File > Import Items and import the certificate files into the system keychain.
  4. The certificate should now show with a red 'X'. That means it is entrusted. To provide trust, double-click the certificate. Under Trust, change the setting at the top when using this certificate to Always Trust.