Configure Oozie to Use SSL

Oozie traffic that uses HTTP is not encrypted by default. To enable Secure Sockets Layer (SSL) encryption for Oozie, follow these steps:

  1. Shut down Oozie.
  2. As the mapr user, run the following command:
    # /opt/mapr/oozie/oozie-<version>/bin/ -hadoop <version> /opt/ -secure
  3. Restart Oozie. After the restart, Oozie listens on port 11443 instead of 11000. Change the value of the OOZIE_URL environment variable by running the following command:
    $ export OOZIE_URL="https://<fqdn>:11443/oozie"
    Note: Using localhost instead of the Oozie server's fully qualified domain name may generate SSL handshake exceptions.