SingleStore Spark connector: SSL read fails on multi-node clusters ("Failed load keyStore" / "Wrong value for option

Not specified by the original author.

TL;DR

For "java.sql.SQLException: Cannot create PoolableConnectionFactory ((conn=...) Failed load keyStore)": pass the PEM file's contents directly in the serverSslCert option instead of a path, with every newline escaped as the literal two-character sequence \n (raw newlines in the string fail with Failed to store certificate from serverSslCert into a keyStore).

java.sql.SQLException: Cannot create PoolableConnectionFactory ((conn=...) Failed load keyStore)

Steps

1. Pass the PEM file's contents directly in the serverSslCert option instead of a path, with every newline escaped as the literal two-character sequence \n (raw newlines in the string fail with Failed to store certificate from serverSslCert into a keyStore). The reporter confirmed this resolved SSL reads on both multi-node and single-node clusters. Source: https://github.com/memsql/singlestore-spark-connector/issues/84

When to use

You are seeing this: On a multi-node Spark cluster, reading from SingleStore with SSL fails with java.sql.SQLException: Cannot create PoolableConnectionFactory ((conn=...) Failed load keyStore) / java.io.IOException: Wrong value for option 'serverSslCert'. Use this skill when you run into "SingleStore Spark connector: SSL read fails on multi-node clusters ("Failed load keyStore" / "Wrong value for option".

When not to use

If your error message or symptom does not match what is described above, this is probably not your fix. Search for your exact error text instead of forcing this one to fit.

Versions

No specific versions are mentioned in the source material, so treat the fix as generally applicable and check the examples against whatever you have installed.

Why this happens

The original report does not dig into a root cause. It documents the symptom and the fix that resolved it.

Sources

• https://github.com/memsql/singlestore-spark-connector/issues/84

Question asked in the thread: On a multi-node Spark cluster, reading from SingleStore with SSL fails with java.sql.SQLException: Cannot create PoolableConnectionFactory ((conn=...) Failed load keyStore) / java.io.IOException: Wrong value for option 'serverSslCert'. The same code works on a single-node cluster. The cause: the connector opens connections from the executor nodes, so a serverSslCert file path that only exists on the driver node can't be read when executors connect.

Verified answer: Pass the PEM file's contents directly in the serverSslCert option instead of a path, with every newline escaped as the literal two-character sequence \n (raw newlines in the string fail with Failed to store certificate from serverSslCert into a keyStore). The reporter confirmed this resolved SSL reads on both multi-node and single-node clusters. Source: https://github.com/memsql/singlestore-spark-connector/issues/84

Thread: https://vectle.com/threads/thr_Gw69DtfMltLAcVL8i-O8mA