Support Questions
Find answers, ask questions, and share your expertise

Updating HDF 3.1.0 Installation from Oracle JDK 1.8.0 161 to 1.8.0 171

New Contributor

We are running a HDF 3.1.0 Stack with Ambari 2.6.0 and are trying to update the Java installation from Oracle JDK 1.8.0 161 to 1.8.0 171.

But after using the newer JDK the Ambari-Agents cannot communicate anymore with the Ambari-Server on port 8440. In ambari-agent.log the agent complains about an SSL issue:

INFO 2018-05-23 09:51:55,223 NetUtil.py:70 - Connecting to https://node1:8440/ca
ERROR 2018-05-23 09:51:55,226 NetUtil.py:96 - EOF occurred in violation of protocol (_ssl.c:579)
ERROR 2018-05-23 09:51:55,226 NetUtil.py:97 - SSLError: Failed to connect. Please check openssl library versions.

I'm quite sure that we are not the only community members using Oracle JDK. Does anybody has the same issue and a solution/workaround?

Kind regards,

Philip

1 REPLY 1

Super Mentor

@Philip Sahli

Please refer to the following article to know the solution: https://community.hortonworks.com/articles/188269/javapython-updates-and-ambari-agent-tls-settings.h...

For CentOS 7, Debian 7, Ubuntu 14 & 16, or SLES 12 (Python 2.7)

To solve this problem simply configure the Ambari Agent to use TLSv1.2 when communicating with the Ambari Server by editing each Ambari Agent’s /etc/ambari-agent/conf/ambari-agent.ini file and adding the following configuration property to the security section:

    [security]
    force_https_protocol=PROTOCOL_TLSv1_2
; ;