[AMBARI-5040] 2-way auth fails when using jdk7

• Type: Bug
• Status: Resolved
• Priority: Critical
• Resolution: Fixed
• Affects Version/s: 1.5.0
• Fix Version/s: 1.5.0
• Component/s: ambari-server
• Assignee: Dmytro Sen
• Reporter: Dmytro Sen
• Created: 11/Mar/14 21:03
• Updated: 13/Mar/14 12:44
• Resolved: 13/Mar/14 12:44

Description

Steps to reproduce:

On the Ambari Server host, open /etc/ambari-server/conf/ambari.properties with a text editor.

Add the following property:
security.server.two_way_ssl = true

Error message

INFO 2014-03-07 13:57:17,184 security.py:184 - Agent certificate not exists, sending sign request
INFO 2014-03-07 13:57:17,335 security.py:89 - SSL Connect being called.. connecting to the server
ERROR 2014-03-07 13:57:17,414 security.py:76 - Two-way SSL authentication failed. Ensure that server and agent certificates were signed by the same CA and restart the agent. 
In order to receive a new agent certificate, remove existing certificate file from keys directory. As a workaround you can turn off two-way SSL authentication in server configuration(ambari.properties) 
Exiting..

Issue Links

• links to: Review Board