Home Forums HDP on Linux – Installation Ambari Agent Registration Failure on RHEL 6.5 Due to OpenSSL

This topic contains 0 replies, has 1 voice, and was last updated by  Pramod Thangali 5 months, 2 weeks ago.

  • Creator
    Topic
  • #51116

    Pramod Thangali
    Moderator

    Ambari Agent Registration Failure on RHEL 6.5 Due to OpenSSL

    Symptom: If you are deploying HDP using Ambari on RHEL 6.5 you will likely see Ambari Agents fail to register with Ambari Server during the Confirm Hosts step in the Cluster Install wizard. After clicking on Failed link on the Wizard page to display the Agent logs. You will see a log entry that looks like this indicating the SSL connection between the Agent and Server failed during registration.

    INFO 2014-04-02 04:25:22,669 NetUtil.py:55 - Failed to connect to https://<ambari-server>:8440/cert/ca due to [Errno 1] _ssl.c:492: error:100AE081:elliptic curve routines:EC_GROUP_new_by_curve_name:unknown group
    
    

    Platforms:

    • RHEL / CentOS 6.5
    • Ambari 1.4 or later

    Root Cause: The OpenSSL library available and installed by default on RHEL/CentOS 6.5 has a bug. Refer to https://bugzilla.redhat.com/show_bug.cgi?id=1025598 for detailed information on the bug.

    Remedy:

    1. Check the OpenSSL library version installed on your host(s):

      rpm -qa | grep openssl
      
      openssl-1.0.1e-15.el6.x86_64
      
      
    2. If the output says openssl-1.0.1e-15.x86_64 (1.0.1 build 15) you will need to upgrade the OpenSSL library by running the following command:

      yum upgrade openssl

    3. Verify you have the newer version of OpenSSL (1.0.1 build 16):

      rpm -qa | grep openssl

      openssl-1.0.1e-16.el6.x86_64

    4. Restart Ambari Agent(s) and Click Retry Failed on the Wizard.

You must be logged in to reply to this topic.