Configure Oozie to Use SSL

About this task

Oozie traffic that uses HTTP is not encrypted by default. To enable Secure Sockets Layer (SSL) encryption for Oozie, follow these steps:

Procedure

  1. Shut down Oozie.
  2. As the mapr user, run the following command: 
    # /opt/mapr/oozie/oozie-<version>/bin/oozie-setup.sh -hadoop <version> /opt/ -secure
  3. Restart Oozie. After the restart, Oozie listens on port 11443 instead of 11000. Change the value of the OOZIE_URL environment variable by running the following command: 
    $ export OOZIE_URL="https://<fqdn>:11443/oozie"
    NOTE: Using localhost instead of the Oozie server's fully qualified domain name may generate SSL handshake exceptions.