Description of problem: ====================== The below messages are flooding glusterd logs on a SSL enabled setup , with IO's running [2020-03-12 09:39:08.483364] I [socket.c:4299:ssl_setup_connection_params] 0-socket.management: SSL support on the I/O path is ENABLED [2020-03-12 09:39:08.483384] I [socket.c:4302:ssl_setup_connection_params] 0-socket.management: SSL support for glusterd is ENABLED [2020-03-12 09:39:08.483391] I [socket.c:4312:ssl_setup_connection_params] 0-socket.management: using certificate depth 1 [2020-03-12 09:39:08.483754] I [socket.c:4357:ssl_setup_connection_params] 0-socket.management: failed to open /etc/ssl/dhparam.pem, DH ciphers are disabled Version-Release number of selected component (if applicable): ============================================================= glusterfs-6.0-30.el8rhgs.x86_64 How reproducible: ================= Always Steps to Reproduce: 1.On a setup configure SSL ,mount the volume and start IO's 2.Check glusterd logs Actual results: =============== The glusterd logs are flooded with these messages [root@rhsqa3 glusterfs]# cat glusterd.log |grep 'failed to open /etc/ssl/dhparam.pem, DH ciphers are disabled'|wc -l 11893 Expected results: ================= It would be good if these messages from 'INFO' to "DEBUG" Additional info: ================ Came across https://bugzilla.redhat.com/show_bug.cgi?id=1626319 where these messages were moved from 'ERROR' to 'INFO'
move below log to Debug mode: [2020-03-12 09:39:08.483754] I [socket.c:4357:ssl_setup_connection_params] 0-socket.management: failed to open /etc/ssl/dhparam.pem, DH ciphers are disabled and reduce the frequency or move to debug mode below logs too: Important Note: let us make sure we keep below message as Info mode, when we setup ssl first time, or post reboot of node or restart of glusterd. In other cases we can move to debug mode [2020-03-12 09:39:08.483364] I [socket.c:4299:ssl_setup_connection_params] 0-socket.management: SSL support on the I/O path is ENABLED [2020-03-12 09:39:08.483384] I [socket.c:4302:ssl_setup_connection_params] 0-socket.management: SSL support for glusterd is ENABLED [2020-03-12 09:39:08.483391] I [socket.c:4312:ssl_setup_connection_params] 0-socket.management: using certificate depth 1
Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory, and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://access.redhat.com/errata/RHBA-2020:2572
The needinfo request[s] on this closed bug have been removed as they have been unresolved for 1000 days