[
https://issues.apache.org/jira/browse/IMPALA-14161?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Daniel Becker resolved IMPALA-14161.
------------------------------------
Resolution: Fixed
> Thrift SSL tests fail on Centos 7
> ---------------------------------
>
> Key: IMPALA-14161
> URL: https://issues.apache.org/jira/browse/IMPALA-14161
> Project: IMPALA
> Issue Type: Bug
> Components: Backend
> Affects Versions: Impala 5.0.0
> Reporter: Joe McDonnell
> Assignee: Daniel Becker
> Priority: Blocker
>
> Several backend tests for Thrift SSL started failing on Centos 7:
> {noformat}
> [ RUN ] SslTest.TLSVersionControl
> /data/jenkins/workspace/impala-cdw-master-staging-core/repos/Impala/be/src/rpc/thrift-server-test.cc:452:
> Failure
> Expected: { ssl_client.iface()->RegisterSubscriber( resp,
> TRegisterSubscriberRequest(), &send_done); } doesn't throw an exception.
> Actual: it throws apache::thrift::transport::TSSLException with description
> "SSL_connect: sslv3 alert handshake failure (SSL_error_code = 1)".
> TLS version: 3, client version:
> tlsv1/data/jenkins/workspace/impala-cdw-master-staging-core/repos/Impala/be/src/rpc/thrift-server-test.cc:452:
> Failure
> Expected: { ssl_client.iface()->RegisterSubscriber( resp,
> TRegisterSubscriberRequest(), &send_done); } doesn't throw an exception.
> Actual: it throws apache::thrift::transport::TSSLException with description
> "SSL_connect: sslv3 alert handshake failure (SSL_error_code = 1)".
> TLS version: 3, client version:
> tlsv1.1/data/jenkins/workspace/impala-cdw-master-staging-core/repos/Impala/be/src/rpc/thrift-server-test.cc:452:
> Failure
> Expected: { ssl_client.iface()->RegisterSubscriber( resp,
> TRegisterSubscriberRequest(), &send_done); } doesn't throw an exception.
> Actual: it throws apache::thrift::transport::TSSLException with description
> "SSL_connect: sslv3 alert handshake failure (SSL_error_code = 1)".
> TLS version: 3, client version:
> tlsv1.2/data/jenkins/workspace/impala-cdw-master-staging-core/repos/Impala/be/src/rpc/thrift-server-test.cc:452:
> Failure
> Expected: { ssl_client.iface()->RegisterSubscriber( resp,
> TRegisterSubscriberRequest(), &send_done); } doesn't throw an exception.
> Actual: it throws apache::thrift::transport::TSSLException with description
> "SSL_connect: sslv3 alert handshake failure (SSL_error_code = 1)".
> TLS version: 4, client version:
> tlsv1/data/jenkins/workspace/impala-cdw-master-staging-core/repos/Impala/be/src/rpc/thrift-server-test.cc:452:
> Failure
> Expected: { ssl_client.iface()->RegisterSubscriber( resp,
> TRegisterSubscriberRequest(), &send_done); } doesn't throw an exception.
> Actual: it throws apache::thrift::transport::TSSLException with description
> "SSL_connect: sslv3 alert handshake failure (SSL_error_code = 1)".
> TLS version: 4, client version:
> tlsv1.1/data/jenkins/workspace/impala-cdw-master-staging-core/repos/Impala/be/src/rpc/thrift-server-test.cc:452:
> Failure
> Expected: { ssl_client.iface()->RegisterSubscriber( resp,
> TRegisterSubscriberRequest(), &send_done); } doesn't throw an exception.
> Actual: it throws apache::thrift::transport::TSSLException with description
> "SSL_connect: sslv3 alert handshake failure (SSL_error_code = 1)".
> TLS version: 4, client version:
> tlsv1.2/data/jenkins/workspace/impala-cdw-master-staging-core/repos/Impala/be/src/rpc/thrift-server-test.cc:452:
> Failure
> Expected: { ssl_client.iface()->RegisterSubscriber( resp,
> TRegisterSubscriberRequest(), &send_done); } doesn't throw an exception.
> Actual: it throws apache::thrift::transport::TSSLException with description
> "SSL_connect: sslv3 alert handshake failure (SSL_error_code = 1)".
> TLS version: 5, client version:
> tlsv1/data/jenkins/workspace/impala-cdw-master-staging-core/repos/Impala/be/src/rpc/thrift-server-test.cc:452:
> Failure
> Expected: { ssl_client.iface()->RegisterSubscriber( resp,
> TRegisterSubscriberRequest(), &send_done); } doesn't throw an exception.
> Actual: it throws apache::thrift::transport::TSSLException with description
> "SSL_connect: sslv3 alert handshake failure (SSL_error_code = 1)".
> TLS version: 5, client version:
> tlsv1.1/data/jenkins/workspace/impala-cdw-master-staging-core/repos/Impala/be/src/rpc/thrift-server-test.cc:452:
> Failure
> Expected: { ssl_client.iface()->RegisterSubscriber( resp,
> TRegisterSubscriberRequest(), &send_done); } doesn't throw an exception.
> Actual: it throws apache::thrift::transport::TSSLException with description
> "SSL_connect: sslv3 alert handshake failure (SSL_error_code = 1)".
> TLS version: 5, client version: tlsv1.2[ FAILED ] SslTest.TLSVersionControl
> (3 ms){noformat}
> The full list of failing tests is:
> {noformat}
> SslTest.ClientBeforeServer
> SslTest.TLSVersionControl
> PasswordProtectedPemFile.CorrectOperation
> KerberosOnAndOff/ThriftKerberizedParamsTest.SslConnectivity/0
> KerberosOnAndOff/ThriftKerberizedParamsTest.SslConnectivity/1{noformat}
> This started after the KRPC rebase, so it may be related.
> This is not seen on Redhat 8 or Ubuntu 20.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
