Bug 1154783

Summary:	openssl version check recommended for RHEL 6.6 support
Product:	[Red Hat Storage] Red Hat Gluster Storage	Reporter:	Jeff Vance <jvance>
Component:	rhs-hadoop-install	Assignee:	Jeff Vance <jvance>
Status:	CLOSED ERRATA	QA Contact:	Martin Kudlej <mkudlej>
Severity:	unspecified	Docs Contact:
Priority:	unspecified
Version:	rhgs-3.0	CC:	bchilds, dahorak, eboyd, jvance, matt, mkudlej, nlevinki, rcyriac, sgraf
Target Milestone:	---	Keywords:	ZStream
Target Release:	RHGS 3.0.4
Hardware:	Unspecified
OS:	Unspecified
Whiteboard:
Fixed In Version:	2.45-1	Doc Type:	Bug Fix
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2015-03-31 10:18:15 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:

Description Jeff Vance 2014-10-20 18:28:42 UTC

Description of problem:
The current 2.25 installer yum upgrades openssl on rhel nodes (eg. yarn-master server). If the openssl version is 1.0.1e-16 or greater then the yum upgrade should be skipped.

Version-Release number of selected component (if applicable):
2.25

How reproducible:


Steps to Reproduce:
1.
2.
3.

Actual results:


Expected results:


Additional info:

Comment 1 Jeff Vance 2014-10-20 18:29:51 UTC

Fixed in 2.26 by adding a new function, version_ok(), which handles a mix of numeric and non-numeric version string components and accurate compare.

Comment 3 Martin Kudlej 2014-10-21 13:25:00 UTC

I don't understand why do you need to check openssl version in rhs-hadoop. Do you require any specific openssl feature in installer which is not in older version?

Comment 4 Jeff Vance 2014-10-21 15:31:32 UTC

Ambari rquires openssl 1.0.1e-16 or greater. This version of openssl is not, by default, on rhel 6.5 (at least not the 6.5 ISOs we've been using).

Comment 5 Martin Kudlej 2014-11-20 13:03:31 UTC

tested with rhs-hadoop-install-2_29-1.el6rhs.noarch and it's OK. -->VERIFIED

Just one note: if version name format will change this test will break. I recommend use something like this:
rpm -q --queryformat "%{Version},%{RELEASE}" openssl

Comment 8 Jeff Vance 2014-12-03 16:12:41 UTC

Using rpm -q  now for openssl and glusterfs version checking.

Comment 11 Martin Kudlej 2015-03-13 11:39:17 UTC

I've found small bug which I think is not important but should be documented.
When openssl version will be  something like "1.0.2-16" this check will not work.

--- prepping rhel nodes...
installed openssl version on mkudlej-mgmt.os1.phx2.redhat.com is 1.0.2-16 and needs updating
yum upgrade openssl on mkudlej-mgmt.os1.phx2.redhat.com: Loaded plugins: product-id, security, subscription-manager
This system is not registered to Red Hat Subscription Management. You can use subscription-manager to register.
Setting up Upgrade Process
No Packages marked for Update
installed openssl version on mkudlej-master.os1.phx2.redhat.com is 1.0.2-16 and needs updating
yum upgrade openssl on mkudlej-master.os1.phx2.redhat.com: Loaded plugins: product-id, security, subscription-manager
This system is not registered to Red Hat Subscription Management. You can use subscription-manager to register.
Setting up Upgrade Process
No Packages marked for Update
--- done prepping rhel nodes


Anyway it will not affect functionality of any rhs-hadoop component and only extra upgrade of openssl will be triggered. -->VERIFIED

Comment 12 Jeff Vance 2015-03-17 04:41:40 UTC

this has been fixed in 2.45

Comment 14 errata-xmlrpc 2015-03-31 10:18:15 UTC

Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://rhn.redhat.com/errata/RHEA-2015-0761.html