Adding Snowflake CA certificates to NiFi truststore
You must ensure that NiFi can communicate securely with Snowflake. To do this, configure NiFi to trust the Snowflake Certificate Authority (CA) by merging the default Snowflake JDK truststore content into the NiFi truststore.
The Snowflake endpoints have certificates signed by a Certificate Authority (CA). You must configure NiFi so that the Snowflake CAs are trusted by NiFi. The recommended approach is to follow the steps documented in How to Add Root and Intermediate CAs to Truststore for TLS/SSL. See the link in the Related information below.
Another approach is to merge the content of the default truststore of the JDK into the NiFi truststore. This approach is described here.
You have reviewed and met the prerequisites
Merge the content of the JDK truststore (represented by the file
cacerts), you can use the below command:
keytool -importkeystore -srckeystore [***path to cacerts***] -destkeystore [***path to NiFi truststore***]
When prompted, enter the password of the JDK truststore. The default is
- Enter the NiFi truststore password.
If you have changed the truststore, you must restart NiFi before the changes are taken into account.
- Build the data flow.
- Create the controller services for your data flow.
- Configure your source processor.
- Configure your target processor.
- Confirm your data flow is successful.