Replies: 3
Ambari Agent Registration Failure on RHEL 6.5 Due to OpenSSL
Symptom: If you are deploying HDP using Ambari on RHEL 6.5 you will likely see Ambari Agents fail to register with Ambari Server during the Confirm Hosts step in the Cluster Install wizard. After clicking on Failed link on the Wizard page to display the Agent logs. You will see a log entry that looks like this indicating the SSL connection between the Agent and Server failed during registration.
INFO 2014-04-02 04:25:22,669 NetUtil.py:55 - Failed to connect to https://<ambari-server>:8440/cert/ca due to [Errno 1] _ssl.c:492: error:100AE081:elliptic curve routines:EC_GROUP_new_by_curve_name:unknown group
Platforms:
- RHEL / CentOS 6.5
- Ambari 1.4 or later
Root Cause: The OpenSSL library available and installed by default on RHEL/CentOS 6.5 has a bug. Refer to https://bugzilla.redhat.com/show_bug.cgi?id=1025598 for detailed information on the bug.
Remedy:
- Check the OpenSSL library version installed on your host(s):
rpm -qa | grep openssl openssl-1.0.1e-15.el6.x86_64 - If the output says openssl-1.0.1e-15.x86_64 (1.0.1 build 15) you will need to upgrade the OpenSSL library by running the following command:
yum upgrade openssl - Verify you have the newer version of OpenSSL (1.0.1 build 16):
rpm -qa | grep opensslopenssl-1.0.1e-16.el6.x86_64 - Restart Ambari Agent(s) and Click Retry Failed on the Wizard.