Sometime a gluster process is throwing "Intermittent error:1408F10B:SSL routines:SSL3_GET_RECORD:wrong version number" while a non-SSL gluster process is trying to communicate with SSL gluster process.Due to this error sometime existing valid SSL connection is disconnected because error is not cleanup from SSL stack. Cause: A non-SSL client causes OpenSSL to push a wrong version error into its thread-local error stack, but this error is never cleared, and it lingers in the stack until the thread is used by another SSL session, and a certain condition requires the error stack to be examined, at which time the old error is discovered and the connection is terminated. Solution: Log and clear the error stack upon terminating the connection.
Can we get a QE ack on this?
Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory (glusterfs bug fix update), and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://access.redhat.com/errata/RHBA-2022:4840