I'm trying to register hostnames in Ambari but getting the error below. We tried to run yum update openssl but its got the latest version.
We tried to run yum - update it didn’t help. I also tried removing the other openssl packages openssl-devel-1.0.1e-42.el6.x86_64,
openssl098e-0.9.8e-17.el6.centos.2.x86_64 and restarting the ambari server/agents and same error. Tried running yum -y install opens* as well but didn’t help. Any ideas?
ERROR 2015-09-23 09:47:07,402 NetUtil.py:77 - [Errno 8] _ssl.c:492: EOF occurred in violation of protocol ERROR 2015-09-23 09:47:07,402 NetUtil.py:78 - SSLError: Failed to connect. Please check openssl library versions. Refer to: https://bugzilla.redhat.com/show_bug.cgi?id=1022468 for more details. WARNING 2015-09-23 09:47:07,402 NetUtil.py:105 - Server at https://test.org:8440is not reachable, sleeping for 10 seconds... WARNING 2015-09-23 09:47:07,402 NetUtil.py:105 - Server at https://test.org:8440is not reachable, sleeping for 10 seconds... INFO 2015-09-23 09:47:14,746 main.py:74 - loglevel=logging.INFO INFO 2015-09-23 09:47:14,746 main.py:74 - loglevel=logging.INFO INFO 2015-09-23 09:47:17,403 NetUtil.py:59 - Connecting to https://test.org:8440/ca WARNING 2015-09-23 09:47:17,404 NetUtil.py:82 - Failed to connect to https://test.org:8440/ca due to [Errno 111] Connection refused WARNING 2015-09-23 09:47:17,404 NetUtil.py:105 - Server at https://test.org:8440is not reachable, sleeping for 10 seconds... WARNING 2015-09-23 09:47:17,404 NetUtil.py:105 - Server at https://test.org:8440is not reachable, sleeping for 10 seconds... ERROR 2015-09-23 09:47:19,780 main.py:315 - Fatal exception occurred: Traceback (most recent call last): File "/usr/lib/python2.6/site-packages/ambari_agent/main.py", line 312, in <module> main(heartbeat_stop_callback) File "/usr/lib/python2.6/site-packages/ambari_agent/main.py", line 248, in main stop_agent() File "/usr/lib/python2.6/site-packages/ambari_agent/main.py", line 198, in stop_agent sys.exit(1) SystemExit: 1 ERROR 2015-09-23 09:47:19,780 main.py:315 - Fatal exception occurred: Traceback (most recent call last): File "/usr/lib/python2.6/site-packages/ambari_agent/main.py", line 312, in <module> main(heartbeat_stop_callback) File "/usr/lib/python2.6/site-packages/ambari_agent/main.py", line 248, in main stop_agent() File "/usr/lib/python2.6/site-packages/ambari_agent/main.py", line 198, in stop_agent sys.exit(1) SystemExit: 1
Yes. That is a known issue. Modify Ambari Server's java.home to the standard oracle jdk.
Hi,
We are also facing same issue. Even after setting java.home=/usr/jdk64/jdk1.8.0_40 in ambari.properties , it is not resolved.
Is standard oracle jdk path different from this ?
Below are logs snippet from ambari-agent.log ::
ERROR 2015-12-24 18:43:31,604 NetUtil.py:77 - [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:590) ERROR 2015-12-24 18:43:31,604 NetUtil.py:78 - SSLError: Failed to connect. Please check openssl library versions. Refer to: https://bugzilla.redhat.com/show_bug.cgi?id=1022468 for more details.
@gaurav sharma I am actually facing the same issue, I have the same SSL error message during the registration. Did you find a solution ?
@Ali Gouta No, we are still trying to figure out the solution.
OpenSSl version in my case is ::
[root@dehdteste7778b54apse01 ~]# rpm -qa | grep openssl
openssl-devel-1.0.1k-13.88.amzn1.x86_64
openssl-1.0.1k-13.88.amzn1.x86_64
Can this be a problem ?
In the documentation, it is said that we should user OpenSSL (v1.01, build 16 or later). So I think you should upgrade your OpenSSL version. Actually, I am running openssl-1.0.1e-42.el6_7.1.x86_64, and still not being able to register my agent :(
[ RESOLVED ]
Gone through same issue only when we are using oVirt Virtualization For our cluster deployment.
Only following solution resolved the problem (Thanks to @bing lv and @Deven Fan:
By adding below config in [security] section of
- vi /etc/ambari-agent/conf/ambari-agent.ini
- force_https_protocol=PROTOCOL_TLSv1_2
- vi /etc/python/cert-verification.cfg
- [https]
- verify=disable
I've been stuck with this problem for a day and I've tried everything on this post, but nothing works.
However, the link from this post solved my problem so I thought I should link it to here.
Basically, disable certificate verification on all nodes
- vi /etc/python/cert-verification.cfg
- [https]
- verify=disable
good luck.
Hello
I've just add these two line below under security section and it works
[security]
ssl_verify_cert=0
force_https_protocol=PROTOCOL_TLSv1_2
In our case the problem was that the other nodes have OpenJDK instead of oracle's, installing Oracle JDK on those nodes solves the problem
In our case the problem was that the other nodes have OpenJDK instead of oracle's, installing Oracle JDK on those nodes solves the problem
I am facing below issue even after upgrading ambari-server,ambari agent, openssl,rebooting ambari,ssh
- ERROR 2016-09-20 09:48:52,494 NetUtil.py:77 - [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:590)
- ERROR 2016-09-20 09:48:52,495 NetUtil.py:78 - SSLError: Failed to connect. Please check openssl library versions.
- Refer to: https://bugzilla.redhat.com/show_bug.cgi?id=1022468 for more details.
- WARNING 2016-09-20 09:48:52,495 NetUtil.py:105 - Server at https://localhost:8440 is not reachable, sleeping for 10 seconds...
- ', None)
- Connection to localhost closed.
- SSH command execution finished
- host=localhost, exitcode=0
- Command end time 2016-09-20 09:48:54
- Registering with the server...
- Registration with the server failed.
- Can anyone pls help me?
- I am using ubuntu 16 OS
i have faced the same issue, for this Java up-grade is not required.
Just intall the openssl package and run installation host registration went fine.
1) from vm connect to the internet
2) Install the opnssl package
#yum install openssl
if it installed fine, you can proceed with host Registration .
it worked for me.
I use openjdk 1.8,then the problem is resolved.
So, I think is just the java version problem...
I am still not very clearly what's the resolve?
rpm -qa | grep java
tzdata-java-2014g-1.el6.noarch
java-1.6.0-openjdk-1.6.0.0-11.1.13.4.el6.x86_64
java-1.7.0-openjdk-1.7.0.95-2.6.4.0.el6_7.x86_64
alternatives --display java
java - status is auto. Current `best' version is /usr/lib/jvm/jre-1.7.0-openjdk.x86_64/bin/java.
and the python problem @Ali Gouta said ,it still the same ....