Bug 1362602
| Summary: | [Open SSL] : Unable to mount an SSL enabled volume via SMB v3/Ganesha v4 | |||
|---|---|---|---|---|
| Product: | [Community] GlusterFS | Reporter: | rjoseph | |
| Component: | libgfapi | Assignee: | rjoseph | |
| Status: | CLOSED CURRENTRELEASE | QA Contact: | Sudhir D <sdharane> | |
| Severity: | high | Docs Contact: | ||
| Priority: | unspecified | |||
| Version: | mainline | CC: | amukherj, asoman, bmohanra, bugs, jthottan, rcyriac, rjoseph, rtalur, sabose | |
| Target Milestone: | --- | Keywords: | ZStream | |
| Target Release: | --- | |||
| Hardware: | x86_64 | |||
| OS: | Linux | |||
| Whiteboard: | ||||
| Fixed In Version: | glusterfs-3.9.0 | Doc Type: | If docs needed, set a value | |
| Doc Text: | Story Points: | --- | ||
| Clone Of: | 1340608 | |||
| : | 1371650 (view as bug list) | Environment: | ||
| Last Closed: | 2017-03-27 18:25:08 UTC | Type: | Bug | |
| Regression: | --- | Mount Type: | --- | |
| Documentation: | --- | CRM: | ||
| Verified Versions: | Category: | --- | ||
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | ||
| Cloudforms Team: | --- | Target Upstream Version: | ||
| Embargoed: | ||||
| Bug Depends On: | 1340608, 1371475 | |||
| Bug Blocks: | 1277939, 1311843, 1371650 | |||
|
Comment 1
Vijay Bellur
2016-08-02 15:49:47 UTC
REVIEW: http://review.gluster.org/15073 (gfapi: SSL connection for mgmt connection is not working) posted (#1) for review on master by Rajesh Joseph (rjoseph) REVIEW: http://review.gluster.org/15072 (socket: SSL_shutdown should not be called after socket disconnet) posted (#2) for review on master by Rajesh Joseph (rjoseph) REVIEW: http://review.gluster.org/15073 (gfapi: SSL connection for mgmt connection is not working) posted (#2) for review on master by Rajesh Joseph (rjoseph) REVIEW: http://review.gluster.org/15072 (socket: SSL_shutdown should not be called after socket disconnet) posted (#3) for review on master by Rajesh Joseph (rjoseph) REVIEW: http://review.gluster.org/15073 (gfapi: SSL connection for mgmt connection is not working) posted (#3) for review on master by Rajesh Joseph (rjoseph) REVIEW: http://review.gluster.org/15072 (socket: SSL_shutdown should not be called after socket disconnect) posted (#4) for review on master by Rajesh Joseph (rjoseph) REVIEW: http://review.gluster.org/15072 (socket: SSL_shutdown should not be called after socket disconnet) posted (#5) for review on master by Rajesh Joseph (rjoseph) REVIEW: http://review.gluster.org/15073 (gfapi: SSL connection for mgmt connection is not working) posted (#4) for review on master by Rajesh Joseph (rjoseph) REVIEW: http://review.gluster.org/15072 (socket: SSL_shutdown should not be called after socket disconnet) posted (#6) for review on master by Rajesh Joseph (rjoseph) REVIEW: http://review.gluster.org/15073 (gfapi: SSL connection for mgmt connection is not working) posted (#5) for review on master by Rajesh Joseph (rjoseph) REVIEW: http://review.gluster.org/15072 (socket: SSL_shutdown should be called before socket shutdown) posted (#7) for review on master by Rajesh Joseph (rjoseph) REVIEW: http://review.gluster.org/15073 (gfapi: SSL connection for mgmt connection is not working) posted (#6) for review on master by Rajesh Joseph (rjoseph) COMMIT: http://review.gluster.org/15072 committed in master by Jeff Darcy (jdarcy) ------ commit 79e006b31a1e6d71f1af02176f8e8acaed7f8cd2 Author: Rajesh Joseph <rjoseph> Date: Tue Aug 2 15:30:27 2016 +0000 socket: SSL_shutdown should be called before socket shutdown SSL_shutdown shuts down an active SSL connection. But we are calling this after underlying socket is disconnected. Change-Id: Ia943179d23395f42b942450dbcf26336d4dfc813 BUG: 1362602 Signed-off-by: Rajesh Joseph <rjoseph> Reviewed-on: http://review.gluster.org/15072 Smoke: Gluster Build System <jenkins.org> CentOS-regression: Gluster Build System <jenkins.org> NetBSD-regression: NetBSD Build System <jenkins.org> Reviewed-by: Jeff Darcy <jdarcy> REVIEW: http://review.gluster.org/15073 (gfapi: SSL connection for mgmt connection is not working) posted (#7) for review on master by Rajesh Joseph (rjoseph) REVIEW: http://review.gluster.org/15073 (gfapi: SSL connection for mgmt connection is not working) posted (#8) for review on master by Rajesh Joseph (rjoseph) REVIEW: http://review.gluster.org/15073 (gfapi: SSL connection for mgmt connection is not working) posted (#9) for review on master by Rajesh Joseph (rjoseph) REVIEW: http://review.gluster.org/15073 (gfapi: SSL connection for mgmt connection is not working) posted (#10) for review on master by Rajesh Joseph (rjoseph) COMMIT: http://review.gluster.org/15073 committed in master by Kaushal M (kaushal) ------ commit 62f4e41e9eafd2838d2a11989f08b0e7627284b4 Author: Rajesh Joseph <rjoseph> Date: Tue Aug 2 15:33:34 2016 +0000 gfapi: SSL connection for mgmt connection is not working Problem: libgfapi does not enable SSL on mgmt connection. Fix: Enable SSL when it is enabled on mgmt connection is enabled, i.e. presence of /var/lib/glusterd/secure-access file Change-Id: I1ce4935b04e6140aeab819e42076defd580b0727 BUG: 1362602 Signed-off-by: Rajesh Joseph <rjoseph> Reviewed-on: http://review.gluster.org/15073 Smoke: Gluster Build System <jenkins.org> NetBSD-regression: NetBSD Build System <jenkins.org> CentOS-regression: Gluster Build System <jenkins.org> Reviewed-by: Niels de Vos <ndevos> Reviewed-by: Kaushal M <kaushal> This bug is getting closed because a release has been made available that should address the reported issue. In case the problem is still not fixed with glusterfs-3.9.0, please open a new bug report. glusterfs-3.9.0 has been announced on the Gluster mailinglists [1], packages for several distributions should become available in the near future. Keep an eye on the Gluster Users mailinglist [2] and the update infrastructure for your distribution. [1] http://lists.gluster.org/pipermail/gluster-users/2016-November/029281.html [2] https://www.gluster.org/pipermail/gluster-users/ |