TLS cloudera manager

[#1]

Can group please assist with TLS 1 configuration and following error rcvd.

Followed the instruction available at cloduera documentation:

http://www.cloudera.com/documentation/enterprise/5-7-x/topics/sg_self_signed_tls.html#xd_583c10bfdbd

http://united.softserveinc.com/blogs/tls-encryption-cloudera-manager/

use_tls=1

(self signed certificate), RHEL 6.5 CM 5.7

Details from agent log file.

11/Sep/2016 12:25:21 +0000] 7617 MainThread agent ERROR Heartbeating to 192.168.1.70:7182 failed.
Traceback (most recent call last):
File "/usr/lib64/cmf/agent/build/env/lib/python2.6/site-packages/cmf-5.7.1-py2.6.egg/cmf/agent.py", line 1201, in _send_heartbeat
self.max_cert_depth)
File "/usr/lib64/cmf/agent/build/env/lib/python2.6/site-packages/cmf-5.7.1-py2.6.egg/cmf/https.py", line 131, in __init__
self.conn.connect()
File "/usr/lib64/cmf/agent/build/env/lib/python2.6/site-packages/M2Crypto-0.21.1-py2.6-linux-x86_64.egg/M2Crypto/httpslib.py", line 50, in connect
self.sock.connect((self.host, self.port))
File "/usr/lib64/cmf/agent/build/env/lib/python2.6/site-packages/M2Crypto-0.21.1-py2.6-linux-x86_64.egg/M2Crypto/SSL/Connection.py", line 185, in connect
ret = self.connect_ssl()
File "/usr/lib64/cmf/agent/build/env/lib/python2.6/site-packages/M2Crypto-0.21.1-py2.6-linux-x86_64.egg/M2Crypto/SSL/Connection.py", line 178, in connect_ssl
return m2.ssl_connect(self.ssl)
SSLError: unknown group

[#2 · Accepted solution]

Hello,

The "unknown group" error is usually caused by an older package of OpenSSL being installed on your hosts.

Run rpm -qa openssl

If you see a version like this: openssl-1.0.1e-15.el6 then upgrade your openssl to a later package, restart the agent, then try again.

Regards,

Ben

[#3]

Thanks Team

Yes, the issue was due to older version of ssl, had fixed this issues last.

Thanks for the details shared.

thank you

Kashi