TLS cloudera manager

KashiCap — Fri, 16 Sep 2022 10:38:48 GMT

Can group please assist with TLS 1 configuration and following error rcvd.

Followed the instruction available at cloduera documentation:

http://www.cloudera.com/documentation/enterprise/5-7-x/topics/sg_self_signed_tls.html#xd_583c10bfdbd

http://united.softserveinc.com/blogs/tls-encryption-cloudera-manager/

use_tls=1

(self signed certificate), RHEL 6.5 CM 5.7

Details from agent log file.

11/Sep/2016 12:25:21 +0000] 7617 MainThread agent ERROR Heartbeating to 192.168.1.70:7182 failed.
Traceback (most recent call last):
File "/usr/lib64/cmf/agent/build/env/lib/python2.6/site-packages/cmf-5.7.1-py2.6.egg/cmf/agent.py", line 1201, in _send_heartbeat
self.max_cert_depth)
File "/usr/lib64/cmf/agent/build/env/lib/python2.6/site-packages/cmf-5.7.1-py2.6.egg/cmf/https.py", line 131, in __init__
self.conn.connect()
File "/usr/lib64/cmf/agent/build/env/lib/python2.6/site-packages/M2Crypto-0.21.1-py2.6-linux-x86_64.egg/M2Crypto/httpslib.py", line 50, in connect
self.sock.connect((self.host, self.port))
File "/usr/lib64/cmf/agent/build/env/lib/python2.6/site-packages/M2Crypto-0.21.1-py2.6-linux-x86_64.egg/M2Crypto/SSL/Connection.py", line 185, in connect
ret = self.connect_ssl()
File "/usr/lib64/cmf/agent/build/env/lib/python2.6/site-packages/M2Crypto-0.21.1-py2.6-linux-x86_64.egg/M2Crypto/SSL/Connection.py", line 178, in connect_ssl
return m2.ssl_connect(self.ssl)
SSLError: unknown group

Re: TLS cloudera manager

bgooley — Mon, 19 Sep 2016 17:00:39 GMT

Hello,

The "unknown group" error is usually caused by an older package of OpenSSL being installed on your hosts.

Run rpm -qa openssl

If you see a version like this: openssl-1.0.1e-15.el6 then upgrade your openssl to a later package, restart the agent, then try again.

Regards,

Ben

Re: TLS cloudera manager

KashiCap — Tue, 20 Sep 2016 03:10:25 GMT

Thanks Team

Yes, the issue was due to older version of ssl, had fixed this issues last.

Thanks for the details shared.

thank you

Kashi

question TLS cloudera manager in Archives of Support Questions (Read Only)

TLS cloudera manager

Re: TLS cloudera manager

Re: TLS cloudera manager