Bug 1403530 - [OpenSSL] : Retrieving the value of "client.ssl" option,before SSL is set up, fails .
Summary: [OpenSSL] : Retrieving the value of "client.ssl" option,before SSL is set up...
Keywords:
Status: CLOSED ERRATA
Alias: None
Product: Red Hat Gluster Storage
Classification: Red Hat Storage
Component: core
Version: rhgs-3.2
Hardware: x86_64
OS: Linux
low
low
Target Milestone: ---
: RHGS 3.5.0
Assignee: Sheetal Pamecha
QA Contact: Vinayak Papnoi
URL:
Whiteboard: ssl
Depends On:
Blocks: 1651059 1696807
TreeView+ depends on / blocked
 
Reported: 2016-12-11 04:09 UTC by Ambarish
Modified: 2019-10-30 12:20 UTC (History)
12 users (show)

Fixed In Version: glusterfs-6.0-1
Doc Type: If docs needed, set a value
Doc Text:
Clone Of:
: 1651059 (view as bug list)
Environment:
Last Closed: 2019-10-30 12:19:36 UTC
Embargoed:


Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
Red Hat Product Errata RHEA-2019:3249 0 None None None 2019-10-30 12:20:11 UTC

Description Ambarish 2016-12-11 04:09:20 UTC
Description of problem:
------------------------

*Before Authenticating Servers & Clients* :

[root@gqas009 ~]# gluster v get testvol client.ssl
Option                                  Value                                   
------                                  -----                                   
volume get option failed. Check the cli/glusterd log file for more details


[root@gqas009 ~]# gluster v get testvol server.ssl
Option                                  Value                                   
------                                  -----                                   
server.ssl                              (null)                                  

*Post authentication* :

[root@gqas009 /]# gluster volume set testvol client.ssl on
volume set: success

[root@gqas009 /]# gluster volume set testvol server.ssl on
volume set: success

[root@gqas009 /]# gluster volume get testvol server.ssl 
Option                                  Value                                   
------                                  -----                                   
server.ssl                              on                                      

[root@gqas009 /]# gluster volume get testvol client.ssl 
Option                                  Value                                   
------                                  -----                                   
client.ssl                              on                                      
[root@gqas009 /]# 


Version-Release number of selected component (if applicable):
-------------------------------------------------------------

glusterfs-3.8.4-5.el7rhgs.x86_64

How reproducible:
-----------------

1/1

Steps to Reproduce:
--------------------

In Description.

Actual results:
---------------

volume get fails.

Expected results:
------------------

Though a negative test,volume get should not fail.

Additional info:
----------------

None.

Comment 2 Ambarish 2016-12-11 04:11:48 UTC
**From CLI.log** :

[2016-12-11 03:56:23.962146] I [cli.c:721:main] 0-cli: Started running gluster with version 3.7.9
[2016-12-11 03:56:24.155650] I [MSGID: 101190] [event-epoll.c:632:event_dispatch_epoll_worker] 0-epoll: Started thread with index 1
[2016-12-11 03:56:24.155738] I [socket.c:2472:socket_event_handler] 0-transport: disconnecting now
[2016-12-11 03:56:24.158218] E [cli-rpc-ops.c:10653:gf_cli_get_vol_opt_cbk] 0-cli: Failed to retrieve key value for value1 fromthe dictionary
[2016-12-11 03:56:24.158323] I [input.c:36:cli_batch] 0-: Exiting with: -2


**From glusterd.log** :

[2016-12-08 07:35:25.867089] I [run.c:191:runner_log] (-->/usr/lib64/glusterfs/3.8.4/xlator/mgmt/glusterd.so(+0xd0472) [0x7f5288add472] -->/usr/lib64/glusterfs/3.8.4/xlator/mgmt/glusterd.so(+0xcff25) [0x7f5288adcf25] -->/lib64/libglusterfs.so.0(runner_log+0x115) [0x7f52943046f5] ) 0-management: Ran script: /var/lib/glusterd/hooks/1/start/post/S29CTDBsetup.sh --volname=testvol --first=yes --version=1 --volume-op=start --gd-workdir=/var/lib/glusterd
[2016-12-08 07:35:26.054678] I [run.c:191:runner_log] (-->/usr/lib64/glusterfs/3.8.4/xlator/mgmt/glusterd.so(+0xd0472) [0x7f5288add472] -->/usr/lib64/glusterfs/3.8.4/xlator/mgmt/glusterd.so(+0xcff25) [0x7f5288adcf25] -->/lib64/libglusterfs.so.0(runner_log+0x115) [0x7f52943046f5] ) 0-management: Ran script: /var/lib/glusterd/hooks/1/start/post/S30samba-start.sh --volname=testvol --first=yes --version=1 --volume-op=start --gd-workdir=/var/lib/glusterd
[2016-12-10 13:45:58.799507] I [MSGID: 106488] [glusterd-handler.c:1537:__glusterd_handle_cli_get_volume] 0-management: Received get vol req
[2016-12-10 13:46:06.468963] E [MSGID: 106332] [glusterd-utils.c:10911:glusterd_get_value_for_vme_entry] 0-management: Failed to get option for transport.socket.ssl-enabled key
[2016-12-10 13:45:58.800684] I [MSGID: 106488] [glusterd-handler.c:1537:__glusterd_handle_cli_get_volume] 0-management: Received get vol req
[2016-12-10 13:46:36.306433] E [MSGID: 106332] [glusterd-utils.c:10911:glusterd_get_value_for_vme_entry] 0-management: Failed to get option for transport.socket.ssl-enabled key
[2016-12-10 13:48:05.358837] W [MSGID: 101095] [xlator.c:147:xlator_volopt_dynload] 0-xlator: /usr/lib64/glusterfs/3.8.4/xlator/features/ganesha.so: cannot open shared object file: No such file or directory
The message "W [MSGID: 101095] [xlator.c:147:xlator_volopt_dynload] 0-xlator: /usr/lib64/glusterfs/3.8.4/xlator/features/ganesha.so: cannot open shared object file: No such file or directory" repeated 2 times between [2016-12-10 13:48:05.358837] and [2016-12-10 13:48:31.710099]

Comment 20 Amar Tumballi 2019-03-14 06:16:21 UTC
Considering the fix was made into upstream, and we agreed to close it earlier, keeping it as POST and possible release candidate as RHGS 3.5.0

Comment 24 Vinayak Papnoi 2019-06-04 10:33:38 UTC
Build version:
--------------
glusterfs-6.0-3.el7rhgs.x86_64

Tried out the steps mentioned in the description.

Before setting up SSL in the cluster, the volume get command passes with appropriate value for the 'client.ssl' volume option

# gluster v get alpha client.ssl
Option                                  Value                                   
------                                  -----                                   
client.ssl                              off                                     


After setting up SSL encryption for the cluster and setting the volume option for 'client.ssl':
# gluster v get alpha client.ssl
Option                                  Value                                   
------                                  -----                                   
client.ssl                              on                                      

Hence, moving the bug to VERIFIED.

Comment 30 errata-xmlrpc 2019-10-30 12:19:36 UTC
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHEA-2019:3249


Note You need to log in before you can comment on or make changes to this bug.