You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@ambari.apache.org by "Andrew Onischuk (JIRA)" <ji...@apache.org> on 2016/05/13 11:55:12 UTC

[jira] [Created] (AMBARI-16658) DevDeploy: Cannot connect to the server using SSLv3

Andrew Onischuk created AMBARI-16658:
----------------------------------------

             Summary: DevDeploy: Cannot connect to the server using SSLv3
                 Key: AMBARI-16658
                 URL: https://issues.apache.org/jira/browse/AMBARI-16658
             Project: Ambari
          Issue Type: Bug
            Reporter: Andrew Onischuk
            Assignee: Andrew Onischuk
             Fix For: 2.4.0
         Attachments: AMBARI-16658.patch


    os-s11-3-irzlbs-devdeployerie-5:~ # curl --sslv3 --insecure -u admin:admin https://172.22.106.251:8443/api/v1/clusters/cl1/hosts
    curl: (35) Unknown SSL protocol error in connection to 172.22.106.251:8443 
    
    os-s11-3-irzlbs-devdeployerie-5:~ # curl --tlsv1 --insecure -u admin:admin https://172.22.106.251:8443/api/v1/clusters/cl1/hosts
    {
      "href" : "http://172.22.106.251:8443/api/v1/clusters/cl1/hosts",
    ...
    

There are no security.server.disabled.protocols or
security.server.disabled.ciphers in ambari.properties.

An error from QE scripts (it's caused because "requests" lib is using sslv3 by
default):

    
    
    2016-05-12 08:50:55,683 INFO requests.packages.urllib3.connectionpool : Starting new HTTPS connection (1): os-s11-3-aijuzs-devdeployerie-5.openstacklocal
    Traceback (most recent call last):
      File "WireEncryption.py", line 205, in <module>
        main()
      File "WireEncryption.py", line 201, in main
        we.TestWireEncryption()
      File "WireEncryption.py", line 36, in TestWireEncryption
        hosts = self.weu.apicl.get_all_hosts()
      File "/ambari_deploy/wireencryption/APICoreLib.py", line 89, in get_all_hosts
        result = self.http_get_request(uri)
      File "/ambari_deploy/wireencryption/APICoreLib.py", line 51, in http_get_request
        response = requests.get(url=url, auth=basic_auth, verify=False)
      File "/usr/lib64/python2.6/site-packages/requests/api.py", line 68, in get
        return request('get', url, **kwargs)
      File "/usr/lib64/python2.6/site-packages/requests/api.py", line 50, in request
        response = session.request(method=method, url=url, **kwargs)
      File "/usr/lib64/python2.6/site-packages/requests/sessions.py", line 464, in request
        resp = self.send(prep, **send_kwargs)
      File "/usr/lib64/python2.6/site-packages/requests/sessions.py", line 576, in send
        r = adapter.send(request, **kwargs)
      File "/usr/lib64/python2.6/site-packages/requests/adapters.py", line 428, in send
        raise SSLError(e, request=request)
    requests.exceptions.SSLError: [Errno 8] _ssl.c:491: EOF occurred in violation of protocol
    





--
This message was sent by Atlassian JIRA
(v6.3.4#6332)