Ambari Agent Registration Failure on RHEL 6.5 Due to OpenSSL

to create new topics or reply. | New User Registration

This topic contains 4 replies, has 4 voices, and was last updated by  S Siddalingaiah 1 week, 3 days ago.

  • Creator
  • #51117

    Pramod Thangali

    Ambari Agent Registration Failure on RHEL 6.5 Due to OpenSSL

    Symptom: If you are deploying HDP using Ambari on RHEL 6.5 you will likely see Ambari Agents fail to register with Ambari Server during the Confirm Hosts step in the Cluster Install wizard. After clicking on Failed link on the Wizard page to display the Agent logs. You will see a log entry that looks like this indicating the SSL connection between the Agent and Server failed during registration.

    INFO 2014-04-02 04:25:22,669 - Failed to connect to https://<ambari-server>:8440/cert/ca due to [Errno 1] _ssl.c:492: error:100AE081:elliptic curve routines:EC_GROUP_new_by_curve_name:unknown group


    • RHEL / CentOS 6.5
    • Ambari 1.4 or later

    Root Cause: The OpenSSL library available and installed by default on RHEL/CentOS 6.5 has a bug. Refer to for detailed information on the bug.


    1. Check the OpenSSL library version installed on your host(s):

      rpm -qa | grep openssl
    2. If the output says openssl-1.0.1e-15.x86_64 (1.0.1 build 15) you will need to upgrade the OpenSSL library by running the following command:

      yum upgrade openssl

    3. Verify you have the newer version of OpenSSL (1.0.1 build 16):

      rpm -qa | grep openssl


    4. Restart Ambari Agent(s) and Click Retry Failed on the Wizard.
Viewing 4 replies - 1 through 4 (of 4 total)

You must be to reply to this topic. | Create Account

  • Author
  • #68962

    S Siddalingaiah

    Hi, i faced similar issue i also noticed my open ssl version was openssl-1.0.1e-15.el6.x86_64 after upgrading to openssl-1.0.1e-16.el6.x86_64 Ambari Registration went through successfully

    Ramesh S


    Darius Agharokh

    Hi, this issue is now resolved. Started the agent manually on the two nodes and ‘retry’ the install. went much further and failed again as I had specified two directories for the namenode (comma delimited), removed the second directory , the install went through.


    Darius Agharokh

    Hi, Not sure if this is the correct thread. I am doing an automated install with Ambari 1.6 and hdp2.0. On “Cluster Install Wizard” step during ‘Install, start and Test”, I get a failure on two nodes of my 5 node test cluster. The error “Hearbeat lost for cluster”. “Ambari agent process is not heartbeating on the host”. This is happening on one of my datanodes and my master namenode. I have correct ssl version,. perhaps not the correct thread, can you please direct me .
    Many thanks


    Jie Lu

    I already install openssl-1..0.1e-16.el6_5.x86_64 on ambari-server and ambari-agent.
    But it is also print out this error info without no reason after “due to”.

Viewing 4 replies - 1 through 4 (of 4 total)
Hortonworks Data Platform
The Hortonworks Data Platform is a 100% open source distribution of Apache Hadoop that is truly enterprise grade having been built, tested and hardened with enterprise rigor.
Get started with Sandbox
Hortonworks Sandbox is a self-contained virtual machine with Apache Hadoop pre-configured alongside a set of hands-on, step-by-step Hadoop tutorials.
Modern Data Architecture
Tackle the challenges of big data. Hadoop integrates with existing EDW, RDBMS and MPP systems to deliver lower cost, higher capacity infrastructure.