Support Questions
Find answers, ask questions, and share your expertise
Announcements
Alert: Welcome to the Unified Cloudera Community. Former HCC members be sure to read and learn how to activate your account here.

How to resolve SSL error upon host registration with Ambari?

Solved Go to solution
Highlighted

How to resolve SSL error upon host registration with Ambari?

Expert Contributor

I'm trying to register hostnames in Ambari but getting the error below. We tried to run yum update openssl but its got the latest version. We tried to run yum - update it didn’t help. I also tried removing the other openssl packages openssl-devel-1.0.1e-42.el6.x86_64, openssl098e-0.9.8e-17.el6.centos.2.x86_64 and restarting the ambari server/agents and same error. Tried running yum -y install opens* as well but didn’t help. Any ideas?

ERROR 2015-09-23 09:47:07,402 NetUtil.py:77 - [Errno 8] _ssl.c:492: EOF occurred in violation of protocol
ERROR 2015-09-23 09:47:07,402 NetUtil.py:78 - SSLError: Failed to connect. Please check openssl library versions.
Refer to: https://bugzilla.redhat.com/show_bug.cgi?id=1022468 for more details.
WARNING 2015-09-23 09:47:07,402 NetUtil.py:105 - Server at https://test.org:8440is not reachable, sleeping for 10 seconds...
WARNING 2015-09-23 09:47:07,402 NetUtil.py:105 - Server at https://test.org:8440is not reachable, sleeping for 10 seconds...
INFO 2015-09-23 09:47:14,746 main.py:74 - loglevel=logging.INFO
INFO 2015-09-23 09:47:14,746 main.py:74 - loglevel=logging.INFO
INFO 2015-09-23 09:47:17,403 NetUtil.py:59 - Connecting to https://test.org:8440/ca
WARNING 2015-09-23 09:47:17,404 NetUtil.py:82 - Failed to connect to https://test.org:8440/ca due to [Errno 111] Connection refused
WARNING 2015-09-23 09:47:17,404 NetUtil.py:105 - Server at https://test.org:8440is not reachable, sleeping for 10 seconds...
WARNING 2015-09-23 09:47:17,404 NetUtil.py:105 - Server at https://test.org:8440is not reachable, sleeping for 10 seconds...
ERROR 2015-09-23 09:47:19,780 main.py:315 - Fatal exception occurred:
Traceback (most recent call last):
  File "/usr/lib/python2.6/site-packages/ambari_agent/main.py", line 312, in <module>
    main(heartbeat_stop_callback)
  File "/usr/lib/python2.6/site-packages/ambari_agent/main.py", line 248, in main
    stop_agent()
  File "/usr/lib/python2.6/site-packages/ambari_agent/main.py", line 198, in stop_agent
    sys.exit(1)
SystemExit: 1
ERROR 2015-09-23 09:47:19,780 main.py:315 - Fatal exception occurred:
Traceback (most recent call last):
  File "/usr/lib/python2.6/site-packages/ambari_agent/main.py", line 312, in <module>
    main(heartbeat_stop_callback)
  File "/usr/lib/python2.6/site-packages/ambari_agent/main.py", line 248, in main
    stop_agent()
  File "/usr/lib/python2.6/site-packages/ambari_agent/main.py", line 198, in stop_agent
    sys.exit(1)
SystemExit: 1


1 ACCEPTED SOLUTION

Accepted Solutions

Re: How to resolve SSL error upon host registration with Ambari?

What is the jdk being used? We have noticed issues issues when open jdk 1.7.0 is used with Ambari Server resoling in the ssl issue. If you are using open jdk 1.7.0, modify java.home and jdk.name in ambari.properties to point to oracle jdk

5 REPLIES 5

Re: How to resolve SSL error upon host registration with Ambari?

What is the jdk being used? We have noticed issues issues when open jdk 1.7.0 is used with Ambari Server resoling in the ssl issue. If you are using open jdk 1.7.0, modify java.home and jdk.name in ambari.properties to point to oracle jdk

Re: How to resolve SSL error upon host registration with Ambari?

New Contributor

The error says connection refused....

"WARNING 2015-09-23 09:47:17,404 NetUtil.py:82 - Failed to connect to https://test.org:8440/ca due to [Errno 111] Connection refused"

Can you confirm that the port is open and listening? Can you telnet to that host / port?

Re: How to resolve SSL error upon host registration with Ambari?

New Contributor

Hi @dkjerrumgaard ,

We are also facing same issue. We can see SSL Certificate error .

Below is snippet from ambari-server.log ::

WARN [qtp-ambari-agent-74] nio:720 - javax.net.ssl.SSLException: Received fatal alert: unknown_ca

From ambari-agent.log ::

INFO 2015-12-28 15:55:31,679 NetUtil.py:59 - Connecting to https://dehdteste7778b5:8440/ca ERROR 2015-12-28 15:55:31,743 NetUtil.py:77 - [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:590) ERROR 2015-12-28 15:55:31,743 NetUtil.py:78 - SSLError: Failed to connect. Please check openssl library versions.

Re: How to resolve SSL error upon host registration with Ambari?

New Contributor

Were you able to resolve it? We have the same issue.

Re: How to resolve SSL error upon host registration with Ambari?

New Contributor

Hi,

We have similar issue. After security update were applied, started getting nio:720 - javax.net.ssl.SSLException: Any solution? Appreciate any help/support in advance

Don't have an account?
Coming from Hortonworks? Activate your account here