Hi Vinicius Higa Murakami ! # python2 -c "import urllib2,json; print(json.loads(urllib2.urlopen('https://www.howsmyssl.com/a/check').read())['tls_version'])" > TLS 1.2 # openssl ciphers -v | awk '{print $2}' | sort | uniq > SSLv3 > TLSv1.2 Is there way enable "debug mode" for the ambari-agent and see how it do connect to the server? ... View more

@Vinicius Higa Murakami PROTOCOL_SSLv23 PROTOCOL_TLSv1 PROTOCOL_TLSv1_1 PROTOCOL_TLSv1_2 ... View more

Hello! My ambari-server and it's agent locate on the same server. Both configured as non-root user start. Ambari-agent was installed manualy. > javac -version javac 1.8.0_181 > java -version java version "1.8.0_181" Java(TM) SE Runtime Environment (build 1.8.0_181-b13) Java HotSpot(TM) 64-Bit Server VM (build 25.181-b13, mixed mode) > echo $JAVA_HOME /usr/jdk64/jdk1.8.0_181 > echo $PATH /usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/bin:/usr/jdk64/jdk1.8.0_181/bin > ambari.properties java.home=/usr/jdk64/jdk1.8.0_181 jdk.name=jdk-8u181-linux-x64.tar.gz jdk1.8.dest-file=jdk-8u181-linux-x64.tar.gz jdk1.8.home=/usr/jdk64/jdk1.8.0_181 stack.java.home=/usr/jdk64/jdk1.8.0_181 stack.jdk.name=jdk-8u181-linux-x64.tar.gz > grep 'jdk.tls.disabledAlgorithms' $JAVA_HOME/jre/lib/security/java.security # jdk.tls.disabledAlgorithms=MD5, SSLv3, DSA, RSA keySize < 2048 jdk.tls.disabledAlgorithms=SSLv3, RC4, MD5withRSA, DH keySize < 1024, \ I checked the ambari-server log but I not found error messages (only info without intresting things). Also, I set into /etc/python/cert-verification.cfg: [https] verify=disable Unfortunatly, I still see error on ambari-agent log: [SSL: TLSV1_ALERT_INTERNAL_ERROR] tlsv1 alert internal error (_ssl.c:590) SSLError: Failed to connect. Please check openssl library versions. ... View more