Mailing-List: contact dev-help@ambari.apache.org; run by ezmlm
Precedence: bulk
Reply-To: dev@ambari.apache.org
Content-Type: multipart/alternative;
 boundary="===============1529465541850941179=="
MIME-Version: 1.0
Subject: Re: Review Request 35481: Namenode log
 contains:javax.net.ssl.SSLHandshakeException: Received fatal alert:
 bad_certificate
From: "Jonathan Hurley" <jhurley@hortonworks.com>
To: "Robert Levas" <rlevas@hortonworks.com>,
 "Jonathan Hurley" <jhurley@hortonworks.com>
Cc: "Tom Beerbower" <tbeerbower@hortonworks.com>,
 "Ambari" <dev@ambari.apache.org>
Date: Tue, 16 Jun 2015 01:39:08 -0000
Message-ID: <20150616013908.9295.61863@reviews.apache.org>
Auto-Submitted: auto-generated
Sender: "Jonathan Hurley" <noreply@reviews.apache.org>
References: <20150616000615.32040.68305@reviews.apache.org>
In-Reply-To: <20150616000615.32040.68305@reviews.apache.org>
Reply-To: "Jonathan Hurley" <jhurley@hortonworks.com>

--===============1529465541850941179==
MIME-Version: 1.0
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: 7bit


-----------------------------------------------------------
This is an automatically generated e-mail. To reply, visit:
https://reviews.apache.org/r/35481/#review88018
-----------------------------------------------------------

Ship it!


Ship It!

- Jonathan Hurley


On June 15, 2015, 8:06 p.m., Tom Beerbower wrote:
> 
> -----------------------------------------------------------
> This is an automatically generated e-mail. To reply, visit:
> https://reviews.apache.org/r/35481/
> -----------------------------------------------------------
> 
> (Updated June 15, 2015, 8:06 p.m.)
> 
> 
> Review request for Ambari, Jonathan Hurley and Robert Levas.
> 
> 
> Bugs: AMBARI-11938
>     https://issues.apache.org/jira/browse/AMBARI-11938
> 
> 
> Repository: ambari
> 
> 
> Description
> -------
> 
> The following is being reported in the namenode logs on a cluster with wire encryption enabled.
> 
> 
>     2015-06-05 23:00:17,702 WARN  mortbay.log (Slf4jLog.java:warn(89)) - EXCEPTION 
>     javax.net.ssl.SSLHandshakeException: Received fatal alert: bad_certificate
>     	at sun.security.ssl.Alerts.getSSLException(Alerts.java:192)
>     	at sun.security.ssl.Alerts.getSSLException(Alerts.java:154)
>     	at sun.security.ssl.SSLSocketImpl.recvAlert(SSLSocketImpl.java:1979)
>     	at sun.security.ssl.SSLSocketImpl.readRecord(SSLSocketImpl.java:1086)
>     	at sun.security.ssl.SSLSocketImpl.performInitialHandshake(SSLSocketImpl.java:1332)
>     	at sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:1359)
>     	at sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:1343)
>     	at org.mortbay.jetty.security.SslSocketConnector$SslConnection.run(SslSocketConnector.java:723)
>     	at org.mortbay.thread.QueuedThreadPool$PoolThread.run(QueuedThreadPool.java:582)
> 
> 
> Ambari JMX alert checks on a kerberized cluster are polling with curl.  The curl call should use -k to ignore checking the server's certificates.
> 
> 
> Diffs
> -----
> 
>   ambari-common/src/main/python/resource_management/libraries/functions/curl_krb_request.py 5e7f795 
> 
> Diff: https://reviews.apache.org/r/35481/diff/
> 
> 
> Testing
> -------
> 
> Manual tested on wire encryption enabled cluster.  Verfied that exception does not reproduce with fix.
> 
> mvn clean test
> 
> all pass
> 
> 
> Thanks,
> 
> Tom Beerbower
> 
>


--===============1529465541850941179==--