Robert Levas created AMBARI-23151:
-------------------------------------

             Summary: Ambari agent should trust Ambari server's SSL certificate
                 Key: AMBARI-23151
                 URL: https://issues.apache.org/jira/browse/AMBARI-23151
             Project: Ambari
          Issue Type: Task
          Components: ambari-agent, ambari-server
    Affects Versions: 2.0.0
            Reporter: Robert Levas
            Assignee: Robert Levas
             Fix For: 3.0.0


Ambari agent should trust Ambari server's SSL certificate.  

When using Python 2.7 and above, the agent tends to fail connecting with the 
Ambari server with a {{CERTIFICATE_VERIFY_FAILED}} error.   

To solve this, else tell Python to no verify certificates (which is insecure):
{noformat:title=/etc/python/cert-verification.cfg}
[https]
verify=disable
{noformat}
See https://access.redhat.com/articles/2039753

Or import the Ambari server's SSL cert into the truststore used by Python, 
which is more secure. 





--
This message was sent by Atlassian JIRA
(v7.6.3#76005)

Reply via email to