ambari-issues mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Andrew Onischuk (JIRA)" <j...@apache.org>
Subject [jira] [Comment Edited] (AMBARI-14236) HDFS and Yarn alerts in https mode when kerberos is disabled
Date Tue, 12 Jul 2016 06:52:11 GMT

    [ https://issues.apache.org/jira/browse/AMBARI-14236?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15372274#comment-15372274
] 

Andrew Onischuk edited comment on AMBARI-14236 at 7/12/16 6:51 AM:
-------------------------------------------------------------------

[~tctruong] I think wire encryption for HDFS and YARN was enabled and when I tried to connect
via curl to their jmx / ui via SSL of any version it failed. I could do that only via TLSv1.


Connecting via Python gived this error:
{noformat}
_ssl.c:491: error:140770FC:SSL routines:SSL23_GET_SERVER_HELLO:unknown protocol>
{noformat}

[~rlevas] I remember you did some research on disabling TLSv1. Can you please chime in.


was (Author: aonishuk):
[~tctruong] I think wire encryption for HDFS and YARN was enabled and when I tried to connect
via curl to their jmx / ui via SSL of any version it failed. I could do that only via TLSv1.


[~rlevas] I remember you did some research on disabling TLSv1. Can you please chime in.

> HDFS and Yarn alerts in https mode when kerberos is disabled
> ------------------------------------------------------------
>
>                 Key: AMBARI-14236
>                 URL: https://issues.apache.org/jira/browse/AMBARI-14236
>             Project: Ambari
>          Issue Type: Bug
>            Reporter: Andrew Onischuk
>            Assignee: Andrew Onischuk
>             Fix For: 2.2.0
>
>
> From NN logs:
>     
>     
>     javax.net.ssl.SSLHandshakeException: SSLv2Hello is disabled
>             at sun.security.ssl.InputRecord.handleUnknownRecord(InputRecord.java:637)
>             at sun.security.ssl.InputRecord.read(InputRecord.java:527)
>             at sun.security.ssl.SSLSocketImpl.readRecord(SSLSocketImpl.java:961)
>             at sun.security.ssl.SSLSocketImpl.performInitialHandshake(SSLSocketImpl.java:1363)
>             at sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:1391)
>             at sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:1375)
>             at org.mortbay.jetty.security.SslSocketConnector$SslConnection.run(SslSocketConnector.java:723)
>             at org.mortbay.thread.QueuedThreadPool$PoolThread.run(QueuedThreadPool.java:582)
>     
> Please check the live cluster for debugging: <https://172.22.74.208:8080>



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Mime
View raw message