How to provide Knox public key to clients to use KnoxSSO if it's multiple instanses of Knox in HA mode

Question

What I've done

I have set up Knox instances with KnoxSSO and with the same master secrets, accessable through nginx balancer
I have set up Zeppelin with shiro definding in knoxJwtRealm.publicKeyPath one of Knox instance's public key

It works fine while Zeppelin connecting to this instance of Knox. But when it switches to another instance I get an error:

KnoxJwtRealm.java[validateToken]:118) - Signature of JWT token could not be verified. Please check the public key

So, is it possible to use KnoxSSO with multiple instances of Apache Knox and how to achieve that?

Sounds like each instance of Knox instance is using a different private key? — Brian Demers, Feb 22 '22 at 14:57
Yes, it was. But after creating wildcard certificate for all instanses of Knox everything works fine. Thank you for responding. — venom13k, Feb 22 '22 at 17:12

score 2 · Answer 1 · answered Feb 22 '22 at 17:10

2

I have found answer here Creating one wildcard certificate and get it to all Knox instances resolved the problem.

answered Feb 22 '22 at 17:10

venom13k