how to start gremlin server with ssl enabled

Kevin Wang

unread,

Oct 20, 2016, 7:19:01 AM10/20/16

to Aurelius

im very new to gremlin server, i was trying to use gremlin server with REST api and ssl enabled, and here is the gremlin-server.yaml i have modified

host: 9.30.54.48

port: 8182

threadPoolWorker: 1

gremlinPool: 8

scriptEvaluationTimeout: 30000

serializedResponseTimeout: 30000

channelizer: org.apache.tinkerpop.gremlin.server.channel.HttpChannelizer

graphs: {

graph: conf/titan-hbase-solr.properties}

plugins:

- aurelius.titan

scriptEngines: {

gremlin-groovy: {

imports: [java.lang.Math],

staticImports: [java.lang.Math.PI],

scripts: [scripts/empty-sample.groovy]},

nashorn: {

imports: [java.lang.Math],

staticImports: [java.lang.Math.PI]}}

serializers:

- { className: org.apache.tinkerpop.gremlin.driver.ser.GryoMessageSerializerV1d0, config: { useMapperFromGraph: graph }}

- { className: org.apache.tinkerpop.gremlin.driver.ser.GryoMessageSerializerV1d0, config: { serializeResultToString: true }}

- { className: org.apache.tinkerpop.gremlin.driver.ser.GraphSONMessageSerializerGremlinV1d0, config: { useMapperFromGraph: graph }}

- { className: org.apache.tinkerpop.gremlin.driver.ser.GraphSONMessageSerializerV1d0, config: { useMapperFromGraph: graph }}

processors:

- { className: org.apache.tinkerpop.gremlin.server.op.session.SessionOpProcessor, config: { sessionTimeout: 28800000 }}

metrics: {

consoleReporter: {enabled: true, interval: 180000},

csvReporter: {enabled: true, interval: 180000, fileName: /tmp/gremlin-server-metrics.csv},

jmxReporter: {enabled: true},

slf4jReporter: {enabled: true, interval: 180000},

gangliaReporter: {enabled: false, interval: 180000, addressingMode: MULTICAST},

graphiteReporter: {enabled: false, interval: 180000}}

threadPoolBoss: 1

maxInitialLineLength: 4096

maxHeaderSize: 8192

maxChunkSize: 8192

maxContentLength: 65536

maxAccumulationBufferComponents: 1024

resultIterationBatchSize: 64

writeBufferHighWaterMark: 32768

writeBufferHighWaterMark: 65536

ssl: {

enabled: true}

when ssl enabled is false, the server works perfectly, but after i set ssl enabled to true, when i try command like

curl -XPOST -Hcontent-type:application/json -d '{"gremlin":"100-1"}' 9.30.54.48:8182

it will only return

curl: (52) Empty reply from server

any help will be much appreciated!!!

Jason Plurad

unread,

Oct 20, 2016, 9:42:17 AM10/20/16

to Aurelius

Hi Kevin,

What versions of Titan and TinkerPop are you using?

I think the SSL support may have become available after TP 3.0.1 since I couldn't find the documentation in that version.

Checkout the TP 3.0.2 security docs here:
http://tinkerpop.apache.org/docs/3.0.2-incubating/#_security

Notice the example curl statement uses the https url. The insecure option is required unless you have a valid certificate available.

curl -X POST --insecure -u stephen:password -d "{\"gremlin\":\"100-1\"}" "https://localhost:8182"

-- Jason

Kevin Wang

unread,

Oct 24, 2016, 11:10:40 PM10/24/16

to Aurelius

Im using titan 1.0 and tinkerpop 3.0.2

when I tried the insecure option, i still get the following message

curl: (52) Empty reply from server

Kevin Wang

unread,

Oct 25, 2016, 2:35:28 AM10/25/16

to Aurelius

Dear Jason,

when I ran the command, i actually encounter the following error

37794 [gremlin-server-worker-1] ERROR org.apache.tinkerpop.gremlin.server.handler.HttpGremlinEndpointHandler - Error processing HTTP Request

io.netty.handler.ssl.NotSslRecordException: not an SSL/TLS record: 504f5354202f20485454502f312e310d0a417574686f72697a6174696f6e3a204261736963206333526c6347686c626a707759584e7a643239795a413d3d0d0a557365722d4167656e743a206375726c2f372e31392e3720287838365f36342d7265646861742d6c696e75782d676e7529206c69626375726c2f372e31392e37204e53532f332e313820426173696320454343207a6c69622f312e322e33206c696269646e2f312e3138206c6962737368322f312e342e320d0a486f73743a20392e33302e3136362e3131333a383138320d0a4163636570743a202a2f2a0d0a436f6e74656e742d4c656e6774683a2031390d0a436f6e74656e742d547970653a206170706c69636174696f6e2f782d7777772d666f726d2d75726c656e636f6465640d0a0d0a7b226772656d6c696e223a223130302d31227d

at io.netty.handler.ssl.SslHandler.decode(SslHandler.java:971)

at io.netty.handler.codec.ByteToMessageDecoder.callDecode(ByteToMessageDecoder.java:327)

at io.netty.handler.codec.ByteToMessageDecoder.channelRead(ByteToMessageDecoder.java:230)

at io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHandlerContext.java:308)

at io.netty.channel.AbstractChannelHandlerContext.fireChannelRead(AbstractChannelHandlerContext.java:294)

at io.netty.channel.DefaultChannelPipeline.fireChannelRead(DefaultChannelPipeline.java:846)

at io.netty.channel.nio.AbstractNioByteChannel$NioByteUnsafe.read(AbstractNioByteChannel.java:131)

at io.netty.channel.nio.NioEventLoop.processSelectedKey(NioEventLoop.java:511)

at io.netty.channel.nio.NioEventLoop.processSelectedKeysOptimized(NioEventLoop.java:468)

at io.netty.channel.nio.NioEventLoop.processSelectedKeys(NioEventLoop.java:382)

at io.netty.channel.nio.NioEventLoop.run(NioEventLoop.java:354)

at io.netty.util.concurrent.SingleThreadEventExecutor$2.run(SingleThreadEventExecutor.java:111)

at java.lang.Thread.run(Thread.java:745)

37798 [gremlin-server-worker-1] WARN io.netty.channel.DefaultChannelPipeline - An exception was thrown by a user handler's exceptionCaught() method while handling the following exception: