Here is the HTML-based knowledge base article in the new format:
Summary
This article explains how to use OpenSSL in order to test the SSL connection from the client (such as Tableau, PowerBI) to Dremio when SSL is enabled in Dremio for the client-endpoints. This helps to pin-point and/or rule out Dremio or client/network side being the issue.
Reported Issue
The user was unable to make a connection to Dremio using through their Tableau/PowerBI client tool receiving SSL handshake errors.
Overview
When trying to connect from Windows based client applications such as Tableau Desktop, Power BI Desktop or even Arrow Flight ODBC, with Dremio being configured to use HTTPS (encryption) and a signed SSL certificate, users may run in to issues connecting to Dremio due to root/intermediate certificate or network/environment related issues. Whilst it's pretty straightforward to run common openssl s_client commands on Linux systems, by default OpenSSL is not installed on Windows so this article aims to detail an easy way to test the SSL connection from Windows to help eliminate the certificate, client and/or Dremio.
Relevant Versions Tools and Integrations
All versions of Dremio.
Steps to Resolve
The below steps will help to troubleshoot connection issues with dremio when trying to connect from Windows client applications.
- Download the attached "openssl-1.0.2j-fips-x86_64" package
- Create OpenSSL folder in C:\
- Copy openssl-1.0.2j-fips-x86_64\OpenSSL\bin\openssl.cnf to C:\OpenSSL
-
CD in to \OpenSSL\bin and run '
openssl.exe version
' to verify the version e.gopenssl.exe version OpenSSL 1.0.2j-fips 26 Sep 2016
-
Now run the below openssl commands against the relevant JDBC (31010) or Arrow flight ODBC (32010) port i.e:
openssl s_client -connect <dremio hostname>:32010 openssl s_client -showcerts -connect <dremio hostname>:32010
Common Challenges
The user may not have system permissions to install the OpenSSL tool as well as face network issues on their side. For this they would need to consult with their network/infrastructure teams.