Bug 1403530

Summary: [OpenSSL] : Retrieving the value of "client.ssl" option,before SSL is set up, fails .
Product: [Red Hat Storage] Red Hat Gluster Storage Reporter: Ambarish <asoman>
Component: coreAssignee: Sheetal Pamecha <spamecha>
Status: CLOSED ERRATA QA Contact: Vinayak Papnoi <vpapnoi>
Severity: low Docs Contact:
Priority: low    
Version: rhgs-3.2CC: amukherj, bturner, rcyriac, rhinduja, rhs-bugs, sanandpa, sheggodu, spamecha, storage-qa-internal, vbellur, vdas, vpapnoi
Target Milestone: ---Keywords: EasyFix, Rebase
Target Release: RHGS 3.5.0   
Hardware: x86_64   
OS: Linux   
Whiteboard: ssl
Fixed In Version: glusterfs-6.0-1 Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of:
: 1651059 (view as bug list) Environment:
Last Closed: 2019-10-30 12:19:36 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On:    
Bug Blocks: 1651059, 1696807    

Description Ambarish 2016-12-11 04:09:20 UTC
Description of problem:
------------------------

*Before Authenticating Servers & Clients* :

[root@gqas009 ~]# gluster v get testvol client.ssl
Option                                  Value                                   
------                                  -----                                   
volume get option failed. Check the cli/glusterd log file for more details


[root@gqas009 ~]# gluster v get testvol server.ssl
Option                                  Value                                   
------                                  -----                                   
server.ssl                              (null)                                  

*Post authentication* :

[root@gqas009 /]# gluster volume set testvol client.ssl on
volume set: success

[root@gqas009 /]# gluster volume set testvol server.ssl on
volume set: success

[root@gqas009 /]# gluster volume get testvol server.ssl 
Option                                  Value                                   
------                                  -----                                   
server.ssl                              on                                      

[root@gqas009 /]# gluster volume get testvol client.ssl 
Option                                  Value                                   
------                                  -----                                   
client.ssl                              on                                      
[root@gqas009 /]# 


Version-Release number of selected component (if applicable):
-------------------------------------------------------------

glusterfs-3.8.4-5.el7rhgs.x86_64

How reproducible:
-----------------

1/1

Steps to Reproduce:
--------------------

In Description.

Actual results:
---------------

volume get fails.

Expected results:
------------------

Though a negative test,volume get should not fail.

Additional info:
----------------

None.

Comment 2 Ambarish 2016-12-11 04:11:48 UTC
**From CLI.log** :

[2016-12-11 03:56:23.962146] I [cli.c:721:main] 0-cli: Started running gluster with version 3.7.9
[2016-12-11 03:56:24.155650] I [MSGID: 101190] [event-epoll.c:632:event_dispatch_epoll_worker] 0-epoll: Started thread with index 1
[2016-12-11 03:56:24.155738] I [socket.c:2472:socket_event_handler] 0-transport: disconnecting now
[2016-12-11 03:56:24.158218] E [cli-rpc-ops.c:10653:gf_cli_get_vol_opt_cbk] 0-cli: Failed to retrieve key value for value1 fromthe dictionary
[2016-12-11 03:56:24.158323] I [input.c:36:cli_batch] 0-: Exiting with: -2


**From glusterd.log** :

[2016-12-08 07:35:25.867089] I [run.c:191:runner_log] (-->/usr/lib64/glusterfs/3.8.4/xlator/mgmt/glusterd.so(+0xd0472) [0x7f5288add472] -->/usr/lib64/glusterfs/3.8.4/xlator/mgmt/glusterd.so(+0xcff25) [0x7f5288adcf25] -->/lib64/libglusterfs.so.0(runner_log+0x115) [0x7f52943046f5] ) 0-management: Ran script: /var/lib/glusterd/hooks/1/start/post/S29CTDBsetup.sh --volname=testvol --first=yes --version=1 --volume-op=start --gd-workdir=/var/lib/glusterd
[2016-12-08 07:35:26.054678] I [run.c:191:runner_log] (-->/usr/lib64/glusterfs/3.8.4/xlator/mgmt/glusterd.so(+0xd0472) [0x7f5288add472] -->/usr/lib64/glusterfs/3.8.4/xlator/mgmt/glusterd.so(+0xcff25) [0x7f5288adcf25] -->/lib64/libglusterfs.so.0(runner_log+0x115) [0x7f52943046f5] ) 0-management: Ran script: /var/lib/glusterd/hooks/1/start/post/S30samba-start.sh --volname=testvol --first=yes --version=1 --volume-op=start --gd-workdir=/var/lib/glusterd
[2016-12-10 13:45:58.799507] I [MSGID: 106488] [glusterd-handler.c:1537:__glusterd_handle_cli_get_volume] 0-management: Received get vol req
[2016-12-10 13:46:06.468963] E [MSGID: 106332] [glusterd-utils.c:10911:glusterd_get_value_for_vme_entry] 0-management: Failed to get option for transport.socket.ssl-enabled key
[2016-12-10 13:45:58.800684] I [MSGID: 106488] [glusterd-handler.c:1537:__glusterd_handle_cli_get_volume] 0-management: Received get vol req
[2016-12-10 13:46:36.306433] E [MSGID: 106332] [glusterd-utils.c:10911:glusterd_get_value_for_vme_entry] 0-management: Failed to get option for transport.socket.ssl-enabled key
[2016-12-10 13:48:05.358837] W [MSGID: 101095] [xlator.c:147:xlator_volopt_dynload] 0-xlator: /usr/lib64/glusterfs/3.8.4/xlator/features/ganesha.so: cannot open shared object file: No such file or directory
The message "W [MSGID: 101095] [xlator.c:147:xlator_volopt_dynload] 0-xlator: /usr/lib64/glusterfs/3.8.4/xlator/features/ganesha.so: cannot open shared object file: No such file or directory" repeated 2 times between [2016-12-10 13:48:05.358837] and [2016-12-10 13:48:31.710099]

Comment 20 Amar Tumballi 2019-03-14 06:16:21 UTC
Considering the fix was made into upstream, and we agreed to close it earlier, keeping it as POST and possible release candidate as RHGS 3.5.0

Comment 24 Vinayak Papnoi 2019-06-04 10:33:38 UTC
Build version:
--------------
glusterfs-6.0-3.el7rhgs.x86_64

Tried out the steps mentioned in the description.

Before setting up SSL in the cluster, the volume get command passes with appropriate value for the 'client.ssl' volume option

# gluster v get alpha client.ssl
Option                                  Value                                   
------                                  -----                                   
client.ssl                              off                                     


After setting up SSL encryption for the cluster and setting the volume option for 'client.ssl':
# gluster v get alpha client.ssl
Option                                  Value                                   
------                                  -----                                   
client.ssl                              on                                      

Hence, moving the bug to VERIFIED.

Comment 30 errata-xmlrpc 2019-10-30 12:19:36 UTC
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHEA-2019:3249