Hello,
How is Cloudera determining the 'host' part in this message? Running CDH 6.3 and receiving the following:
ERROR Failed fetching torrent: Peer certificate subjectAltName does not match host, expected 10.3.0.134, got DNS:srv-c01.mws.mds.xyz, DNS:cm-r01nn01.mws.mds.xyz, DNS:cm-r01nn02.mws.mds.xyz
Yet the reverse and forward lookup work just fine. Why is it receiving an IP for the host? Not able to make heads or tails out of the code yet.
vi /opt/cloudera/cm-agent/lib/python2.7/site-packages/M2Crypto/httpslib.py +69
vi /opt/cloudera/cm-agent/lib/python2.7/site-packages/M2Crypto/SSL/Connection.py +313
vi /opt/cloudera/cm-agent/lib/python2.7/site-packages/M2Crypto/SSL/Checker.py +125
[29/Dec/2020 02:24:42 +0000] 20442 Thread-13 downloader ERROR Failed fetching torrent: Peer certificate subjectAltName does not match host, expected 10.3.0.134, got DNS:srv-c01.mws.mds.xyz, DNS:cm-r01nn01.mws.mds.xyz, DNS:cm-r01nn02.mws.mds.xyz
Traceback (most recent call last):
File "/opt/cloudera/cm-agent/lib/python2.7/site-packages/cmf/downloader.py", line 264, in download
cmf.https.ssl_url_opener.fetch_to_file(torrent_url, torrent_file)
File "/opt/cloudera/cm-agent/lib/python2.7/site-packages/cmf/https.py", line 193, in fetch_to_file
resp = self.open(req_url)
File "/opt/cloudera/cm-agent/lib/python2.7/site-packages/cmf/https.py", line 188, in open
return self.opener(url, *pargs, **kwargs)
File "/usr/lib64/python2.7/urllib2.py", line 431, in open
response = self._open(req, data)
File "/usr/lib64/python2.7/urllib2.py", line 449, in _open
'_open', req)
File "/usr/lib64/python2.7/urllib2.py", line 409, in _call_chain
result = func(*args)
File "/opt/cloudera/cm-agent/lib/python2.7/site-packages/cmf/https.py", line 179, in https_open
return self.do_open(opener, req)
File "/usr/lib64/python2.7/urllib2.py", line 1211, in do_open
h.request(req.get_method(), req.get_selector(), req.data, headers)
File "/usr/lib64/python2.7/httplib.py", line 1041, in request
self._send_request(method, url, body, headers)
File "/usr/lib64/python2.7/httplib.py", line 1075, in _send_request
self.endheaders(body)
File "/usr/lib64/python2.7/httplib.py", line 1037, in endheaders
self._send_output(message_body)
File "/usr/lib64/python2.7/httplib.py", line 881, in _send_output
self.send(msg)
File "/usr/lib64/python2.7/httplib.py", line 843, in send
self.connect()
File "/opt/cloudera/cm-agent/lib/python2.7/site-packages/M2Crypto/httpslib.py", line 69, in connect
sock.connect((self.host, self.port))
File "/opt/cloudera/cm-agent/lib/python2.7/site-packages/M2Crypto/SSL/Connection.py", line 313, in connect
if not check(self.get_peer_cert(), self.addr[0]):
File "/opt/cloudera/cm-agent/lib/python2.7/site-packages/M2Crypto/SSL/Checker.py", line 125, in __call__
fieldName='subjectAltName')
WrongHost: Peer certificate subjectAltName does not match host, expected 10.3.0.134, got DNS:srv-c01.mws.mds.xyz, DNS:cm-r01nn01.mws.mds.xyz, DNS:cm-r01nn02.mws.mds.xyz
^C
root / var log cloudera-scm-agent dig -x 10.3.0.134
; <<>> DiG 9.9.4-RedHat-9.9.4-73.el7_6 <<>> -x 10.3.0.134
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 48590
;; flags: qr aa rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 2, ADDITIONAL: 3
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;134.0.3.10.in-addr.arpa. IN PTR
;; ANSWER SECTION:
134.0.3.10.in-addr.arpa. 86400 IN PTR cm-r01nn01.mws.mds.xyz.
;; AUTHORITY SECTION:
0.3.10.in-addr.arpa. 86400 IN NS idmipa03.mws.mds.xyz.
0.3.10.in-addr.arpa. 86400 IN NS idmipa04.mws.mds.xyz.
;; ADDITIONAL SECTION:
idmipa03.mws.mds.xyz. 1200 IN A 192.168.0.154
idmipa04.mws.mds.xyz. 1200 IN A 192.168.0.155
;; Query time: 1 msec
;; SERVER: 192.168.0.51#53(192.168.0.51)
;; WHEN: Tue Dec 29 02:24:57 EST 2020
;; MSG SIZE rcvd: 166
root / var log cloudera-scm-agent dig cm-r01nn01
; <<>> DiG 9.9.4-RedHat-9.9.4-73.el7_6 <<>> cm-r01nn01
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 37372
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;cm-r01nn01. IN A
;; AUTHORITY SECTION:
. 9788 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2020122900 1800 900 604800 86400
;; Query time: 1 msec
;; SERVER: 192.168.0.51#53(192.168.0.51)
;; WHEN: Tue Dec 29 02:25:04 EST 2020
;; MSG SIZE rcvd: 114
root / var log cloudera-scm-agent dig cm-r01nn01.mws.mds.xyz
; <<>> DiG 9.9.4-RedHat-9.9.4-73.el7_6 <<>> cm-r01nn01.mws.mds.xyz
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 20538
;; flags: qr aa rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 2, ADDITIONAL: 3
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;cm-r01nn01.mws.mds.xyz. IN A
;; ANSWER SECTION:
cm-r01nn01.mws.mds.xyz. 1200 IN A 10.3.0.134
;; AUTHORITY SECTION:
mws.mds.xyz. 86400 IN NS idmipa03.mws.mds.xyz.
mws.mds.xyz. 86400 IN NS idmipa04.mws.mds.xyz.
;; ADDITIONAL SECTION:
idmipa03.mws.mds.xyz. 1200 IN A 192.168.0.154
idmipa04.mws.mds.xyz. 1200 IN A 192.168.0.155
;; Query time: 1 msec
;; SERVER: 192.168.0.51#53(192.168.0.51)
;; WHEN: Tue Dec 29 02:25:08 EST 2020
;; MSG SIZE rcvd: 145
root / var log cloudera-scm-agent nslookup cm-r01nn01
Server: 192.168.0.51
Address: 192.168.0.51#53
Name: cm-r01nn01.mws.mds.xyz
Address: 10.3.0.134
root / var log cloudera-scm-agent nslookup 10.3.0.134
Server: 192.168.0.51
Address: 192.168.0.51#53
134.0.3.10.in-addr.arpa name = cm-r01nn01.mws.mds.xyz.
root / var log cloudera-scm-agent cat /etc/hosts
127.0.0.1 localhost localhost.localdomain localhost4 localhost4.localdomain4
::1 localhost localhost.localdomain localhost6 localhost6.localdomain6
10.3.0.134 cm-r01nn01.mws.mds.xyz cm-r01nn01
root / var log cloudera-scm-agent
