[AMBARI-25872] Ambari agent lost heartbeat with server when server use http instead of ssl

• Type: Bug
• Status: Open
• Priority: Major
• Resolution: Unresolved
• Component/s: ambari-agent, ambari-server
• Assignee: Unassigned
• Reporter: caijialiang
• Created: 27/Feb/23 07:38
• Updated: 09/Feb/24 23:09

Description

there is a bug when set agent.ssl=false at ambari server conf file .

the connection type ambari server used to communcaiate with ambari agent is  one of http, ssl one way or ssl twoway ,and ssl one way is the default connection type.

reproduction step:

1.add this line to ambari server property file /etc/ambari-server/conf/ambari.properties.

agent.ssl=false

2. restart ambari server , all the amabri agent are lost heartbeat with server,

3.you can see  errors in ambari agent log

RNING 2023-02-25 15:14:36,421 security.py:116 - Could not connect to wss://gs-server-13481:8441/agent/stomp/v1. [SSL: UNKNOWN_PROTOCOL] unknown protocol (_ssl.c:618)
INFO 2023-02-25 15:14:36,422 HeartbeatThread.py:106 - Connection error "[SSL: UNKNOWN_PROTOCOL] unknown protocol (_ssl.c:618)". Re-running the registration
INFO 2023-02-25 15:14:46,423 NetUtil.py:61 - Connecting to https://gs-server-13481:8440/connection_info
ERROR 2023-02-25 15:14:46,429 NetUtil.py:87 - [SSL: UNKNOWN_PROTOCOL] unknown protocol (_ssl.c:618)
ERROR 2023-02-25 15:14:46,429 NetUtil.py:88 - SSLError: Failed to connect. Please check openssl library versions.
Refer to: https://bugzilla.redhat.com/show_bug.cgi?id=1022468 for more details.
INFO 2023-02-25 15:14:46,430 security.py:61 - Connecting to wss://gs-server-13481:8441/agent/stomp/v1

Issue Links

• links to: GitHub PR#3650