[IMPALA-7018] OpenSSL pending errors not cleared when spill-to-disk encryption is enabled

• Type: Improvement
• Status: Resolved
• Priority: Critical
• Resolution: Fixed
• Affects Version/s: Impala 2.13.0, Impala 3.1.0
• Fix Version/s: Impala 2.13.0, Impala 3.1.0
• Component/s: Backend
• Labels: crash
• Target Version: Impala 2.13.0, Impala 3.1.0
• Epic Color: ghx-label-4
• Assignee: Tim Armstrong
• Reporter: Tim Armstrong
• Created: 11/May/18 23:37
• Updated: 06/Sep/18 23:44
• Resolved: 15/May/18 16:20

Description

Hit DCHECK because of OpenSSL pending errors in my precommit job for enabling disk spill encryption by default: https://jenkins.impala.io/job/ubuntu-16.04-from-scratch/212

F0509 19:35:46.537220 33290 openssl_util.h:201] Check failed: ERR_peek_error() == 0 (101171331 vs. 0) Expected no pending OpenSSL errors on kudu::Status kudu::security::TlsContext::InitiateHandshake(kudu::security::TlsHandshakeType, kudu::security::TlsHandshake*) const entry, but had: error:0607C083:digital envelope routines:EVP_CIPHER_CTX_ctrl:no cipher set:evp_enc.c:610 error:0607C083:digital envelope routines:EVP_CIPHER_CTX_ctrl:no cipher set:evp_enc.c:610 error:0607C083:digital envelope routines:EVP_CIPHER_CTX_ctrl:no cipher set:evp_enc.c:610 error:0607C083:digital envelope routines:EVP_CIPHER_CTX_ctrl:no cipher set:evp_enc.c:610 eF0509 19:35:46.537292 33290 openssl_util.h:201] Check failed: ERR_peek_error() == 0 (101171331 vs. 0) Expected no pending OpenSSL errors on kudu::Status kudu::security::TlsContext::InitiateHandshake(kudu::security::TlsHandshakeType, kudu::security::TlsHandshake*) const entry, but had: error:0607C083:digital envelope routines:EVP_CIPHER_CTX_ctrl:no cipher set:evp_enc.c:610 error:0607C083:digital envelope routines:EVP_CIPHER_CTX_ctrl:no cipher set:evp_enc.c:610 error:0607C083:digital envelope routines:EVP_CIPHER_CTX_ctrl:no cipher set:evp_enc.c:610 error:0607C083:digital envelope routines:EVP_CIPHER_CTX_ctrl:no cipher set:evp_enc.c:610 error:0607C083:digital envelope routines:EVP_CIPHER_CTX_ctrl:no cipher set:evp_enc.c:610 error:0607C083:digital envelope routines:EVP_CIPHER_CTX_ctrl:no cipher set:evp_enc.c:610 error:0607C083:digital envelope routines:EVP_CIPHER_CTX_ctrl:no cipher set:evp_enc.c:610 error:0607C083:digital envelope routines:EVP_CIPHER_CTX_ctrl:no cipher set:evp_enc.c:610 error:0607C083:digital envelope routines:EVP_CIPHER_CTX_ctrl:no cipher set:evp_enc.c:610 error:0607C083:digital envelope routines:EVP_CIPHER_CTX_ctrl:no cipher set:evp_enc.c:610 error:0607C083:digital envelope routines:EVP_CIPHER_CTX_ctrl:no cipher set:evp_enc.c:610 error:0607C083:digital envelope routines:EVP_CIPHER_CTX_ctrl:no cipher set:evp_enc.c:610 error:0607C083:digital envelope routines:EVP_CIPHER_CTX_ctrl:no cipher set:evp_enc.c:610 error:0607C083:digital envelope routines:EVP_CIPHER_CTX_ctrl:no cipher set:evp_enc.c:610 error:0607C083:digital envelope routines:EVP_CIPHER_CTX_ctrl:no cipher set:evp_enc.c:610

Issue Links

• is broken by: IMPALA-6219 Use AES-GCM for spill-to-disk encryption when CLMUL instruction is present and performant