Review Request 47343: DevDeploy: Cannot connect to the server using SSLv3

2016-05-13 Thread Andrew Onischuk

---
This is an automatically generated e-mail. To reply, visit:
https://reviews.apache.org/r/47343/
---

Review request for Ambari and Robert Levas.


Bugs: AMBARI-16658
https://issues.apache.org/jira/browse/AMBARI-16658


Repository: ambari


Description
---

os-s11-3-irzlbs-devdeployerie-5:~ # curl --sslv3 --insecure -u admin:admin 
https://172.22.106.251:8443/api/v1/clusters/cl1/hosts
curl: (35) Unknown SSL protocol error in connection to 172.22.106.251:8443 

os-s11-3-irzlbs-devdeployerie-5:~ # curl --tlsv1 --insecure -u admin:admin 
https://172.22.106.251:8443/api/v1/clusters/cl1/hosts
{
  "href" : "http://172.22.106.251:8443/api/v1/clusters/cl1/hosts";,
...


There are no security.server.disabled.protocols or
security.server.disabled.ciphers in ambari.properties.

An error from QE scripts (it's caused because "requests" lib is using sslv3 by
default):



2016-05-12 08:50:55,683 INFO requests.packages.urllib3.connectionpool : 
Starting new HTTPS connection (1): 
os-s11-3-aijuzs-devdeployerie-5.openstacklocal
Traceback (most recent call last):
  File "WireEncryption.py", line 205, in 
main()
  File "WireEncryption.py", line 201, in main
we.TestWireEncryption()
  File "WireEncryption.py", line 36, in TestWireEncryption
hosts = self.weu.apicl.get_all_hosts()
  File "/ambari_deploy/wireencryption/APICoreLib.py", line 89, in 
get_all_hosts
result = self.http_get_request(uri)
  File "/ambari_deploy/wireencryption/APICoreLib.py", line 51, in 
http_get_request
response = requests.get(url=url, auth=basic_auth, verify=False)
  File "/usr/lib64/python2.6/site-packages/requests/api.py", line 68, in get
return request('get', url, **kwargs)
  File "/usr/lib64/python2.6/site-packages/requests/api.py", line 50, in 
request
response = session.request(method=method, url=url, **kwargs)
  File "/usr/lib64/python2.6/site-packages/requests/sessions.py", line 464, 
in request
resp = self.send(prep, **send_kwargs)
  File "/usr/lib64/python2.6/site-packages/requests/sessions.py", line 576, 
in send
r = adapter.send(request, **kwargs)
  File "/usr/lib64/python2.6/site-packages/requests/adapters.py", line 428, 
in send
raise SSLError(e, request=request)
requests.exceptions.SSLError: [Errno 8] _ssl.c:491: EOF occurred in 
violation of protocol


Diffs
-

  
ambari-server/src/main/java/org/apache/ambari/server/controller/AmbariServer.java
 a071c9b 

Diff: https://reviews.apache.org/r/47343/diff/


Testing
---

mvn clean test


Thanks,

Andrew Onischuk



Re: Review Request 47343: DevDeploy: Cannot connect to the server using SSLv3

2016-05-13 Thread Robert Levas

---
This is an automatically generated e-mail. To reply, visit:
https://reviews.apache.org/r/47343/#review133078
---


Ship it!




Ship It!

- Robert Levas


On May 13, 2016, 7:55 a.m., Andrew Onischuk wrote:
> 
> ---
> This is an automatically generated e-mail. To reply, visit:
> https://reviews.apache.org/r/47343/
> ---
> 
> (Updated May 13, 2016, 7:55 a.m.)
> 
> 
> Review request for Ambari and Robert Levas.
> 
> 
> Bugs: AMBARI-16658
> https://issues.apache.org/jira/browse/AMBARI-16658
> 
> 
> Repository: ambari
> 
> 
> Description
> ---
> 
> os-s11-3-irzlbs-devdeployerie-5:~ # curl --sslv3 --insecure -u admin:admin 
> https://172.22.106.251:8443/api/v1/clusters/cl1/hosts
> curl: (35) Unknown SSL protocol error in connection to 
> 172.22.106.251:8443 
> 
> os-s11-3-irzlbs-devdeployerie-5:~ # curl --tlsv1 --insecure -u 
> admin:admin https://172.22.106.251:8443/api/v1/clusters/cl1/hosts
> {
>   "href" : "http://172.22.106.251:8443/api/v1/clusters/cl1/hosts";,
> ...
> 
> 
> There are no security.server.disabled.protocols or
> security.server.disabled.ciphers in ambari.properties.
> 
> An error from QE scripts (it's caused because "requests" lib is using sslv3 by
> default):
> 
> 
> 
> 2016-05-12 08:50:55,683 INFO requests.packages.urllib3.connectionpool : 
> Starting new HTTPS connection (1): 
> os-s11-3-aijuzs-devdeployerie-5.openstacklocal
> Traceback (most recent call last):
>   File "WireEncryption.py", line 205, in 
> main()
>   File "WireEncryption.py", line 201, in main
> we.TestWireEncryption()
>   File "WireEncryption.py", line 36, in TestWireEncryption
> hosts = self.weu.apicl.get_all_hosts()
>   File "/ambari_deploy/wireencryption/APICoreLib.py", line 89, in 
> get_all_hosts
> result = self.http_get_request(uri)
>   File "/ambari_deploy/wireencryption/APICoreLib.py", line 51, in 
> http_get_request
> response = requests.get(url=url, auth=basic_auth, verify=False)
>   File "/usr/lib64/python2.6/site-packages/requests/api.py", line 68, in 
> get
> return request('get', url, **kwargs)
>   File "/usr/lib64/python2.6/site-packages/requests/api.py", line 50, in 
> request
> response = session.request(method=method, url=url, **kwargs)
>   File "/usr/lib64/python2.6/site-packages/requests/sessions.py", line 
> 464, in request
> resp = self.send(prep, **send_kwargs)
>   File "/usr/lib64/python2.6/site-packages/requests/sessions.py", line 
> 576, in send
> r = adapter.send(request, **kwargs)
>   File "/usr/lib64/python2.6/site-packages/requests/adapters.py", line 
> 428, in send
> raise SSLError(e, request=request)
> requests.exceptions.SSLError: [Errno 8] _ssl.c:491: EOF occurred in 
> violation of protocol
> 
> 
> Diffs
> -
> 
>   
> ambari-server/src/main/java/org/apache/ambari/server/controller/AmbariServer.java
>  a071c9b 
> 
> Diff: https://reviews.apache.org/r/47343/diff/
> 
> 
> Testing
> ---
> 
> mvn clean test
> 
> 
> Thanks,
> 
> Andrew Onischuk
> 
>