SSL errors

[#1]

I'm trying to setup my Hortonworks cluster. I manually installed ambari-agent-2.6.2.2 and modified /etc/ambari-agent/conf/ambari-agent.ini to point to my server. It's giving me SSL errors trying to connect to the server.

I was under the impression that HW server supports both secure and non-secure connection with ports 8440 and 8441 respectively. Is it not true? Am I supposed to setup SSL certificates?

[#2]

@Igor Grinkin

Can you please share the exact SSL error that you are noticing on the ambari Agents log.

However most common error is the one mentioned in the following Article with solution:

NetUtil.py:96 - EOF occurred in violation of protocol (_ssl.c:579)
NetUtil.py:97 - SSLError: Failed to connect. Please check openssl library versions.

https://community.hortonworks.com/articles/188269/javapython-updates-and-ambari-agent-tls-settings.h...

[#3]

The error was:

INFO 2018-11-13 19:23:20,083 main.py:439 - Connecting to Ambari server at https://hw-server.dev.com:8440 (10.0.2.34) INFO 2018-11-13 19:23:20,083 NetUtil.py:70 - Connecting to https://hw-server.dev.com:8440/ca ERROR 2018-11-13 19:23:20,104 NetUtil.py:96 - EOF occurred in violation of protocol (_ssl.c:579) ERROR 2018-11-13 19:23:20,104 NetUtil.py:97 - SSLError: Failed to connect. Please check openssl library versions.

The following seem to clear the issue.

[security]

force_https_protocol=PROTOCOL_TLSv1_2

Is there any way to register the agent from cli once the ambari-agent is running?

[#4]

@Igor Grinkin

Correct as mentioned in the previously shared link that the solution is applicable for

Solution For CentOS 7, Debian 7, Ubuntu 14 & 16, or SLES 12 (Python 2.7)

To solve this problem simply configure the Ambari Agent to use TLSv1.2 when communicating with the Ambari Server by editing each Ambari Agent’s /etc/ambari-agent/conf/ambari-agent.ini file and adding the following configuration property to the security section:

[security]
force_https_protocol=PROTOCOL_TLSv1_2

.

Regarding your query : "Is there any way to register the agent from cli once the ambari-agent is running?"

Once the ambari agent is restarted it will automatically send a registration request to Ambari Server. And you should be able to see heartbeat message in ambari UI when you click on the Hosts page in the ambari UI. The hose should be shown as green.

# ambari-agent restart

.