[
https://issues.apache.org/jira/browse/AMBARI-14236?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15372274#comment-15372274
]
Andrew Onischuk edited comment on AMBARI-14236 at 7/12/16 6:51 AM:
-------------------------------------------------------------------
[~tctruong] I think wire encryption for HDFS and YARN was enabled and when I
tried to connect via curl to their jmx / ui via SSL of any version it failed. I
could do that only via TLSv1.
Connecting via Python gived this error:
{noformat}
_ssl.c:491: error:140770FC:SSL routines:SSL23_GET_SERVER_HELLO:unknown protocol>
{noformat}
[~rlevas] I remember you did some research on disabling TLSv1. Can you please
chime in.
was (Author: aonishuk):
[~tctruong] I think wire encryption for HDFS and YARN was enabled and when I
tried to connect via curl to their jmx / ui via SSL of any version it failed. I
could do that only via TLSv1.
[~rlevas] I remember you did some research on disabling TLSv1. Can you please
chime in.
> HDFS and Yarn alerts in https mode when kerberos is disabled
> ------------------------------------------------------------
>
> Key: AMBARI-14236
> URL: https://issues.apache.org/jira/browse/AMBARI-14236
> Project: Ambari
> Issue Type: Bug
> Reporter: Andrew Onischuk
> Assignee: Andrew Onischuk
> Fix For: 2.2.0
>
>
> From NN logs:
>
>
> javax.net.ssl.SSLHandshakeException: SSLv2Hello is disabled
> at
> sun.security.ssl.InputRecord.handleUnknownRecord(InputRecord.java:637)
> at sun.security.ssl.InputRecord.read(InputRecord.java:527)
> at
> sun.security.ssl.SSLSocketImpl.readRecord(SSLSocketImpl.java:961)
> at
> sun.security.ssl.SSLSocketImpl.performInitialHandshake(SSLSocketImpl.java:1363)
> at
> sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:1391)
> at
> sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:1375)
> at
> org.mortbay.jetty.security.SslSocketConnector$SslConnection.run(SslSocketConnector.java:723)
> at
> org.mortbay.thread.QueuedThreadPool$PoolThread.run(QueuedThreadPool.java:582)
>
> Please check the live cluster for debugging: <https://172.22.74.208:8080>
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
