Uploaded image for project: 'Puppet Server'
  1. Puppet Server
  2. SERVER-207

puppetserver does not handle ssl renegotiation to different puppetdb servers behind a vip

    Details

    • Type: Bug
    • Status: Closed
    • Priority: Minor
    • Resolution: Fixed
    • Affects Version/s: SERVER 0.4.0
    • Fix Version/s: None
    • Component/s: Puppet Server
    • Labels:
      None
    • Environment:

      RHEL 7, RHEL 6

    • Template:

      Description

      I have two puppetdb servers behind a VIP. Puppetserver currently requires them to have the "same" ssl cert in order to not get this error.

      2014-11-20 22:04:03,392 ERROR [c.p.h.c.SyncHttpClient] Error executing http request
      javax.net.ssl.SSLHandshakeException: server certificate change is restrictedduring renegotiation
      at sun.security.ssl.Handshaker.checkThrown(Handshaker.java:1300) ~[na:1.7.0_71]
      at sun.security.ssl.SSLEngineImpl.checkTaskThrown(SSLEngineImpl.java:513) ~[na:1.7.0_71]
      at sun.security.ssl.SSLEngineImpl.writeAppRecord(SSLEngineImpl.java:1180) ~[na:1.7.0_71]
      at sun.security.ssl.SSLEngineImpl.wrap(SSLEngineImpl.java:1152) ~[na:1.7.0_71]
      at javax.net.ssl.SSLEngine.wrap(SSLEngine.java:469) ~[na:1.7.0_71]
      at org.apache.http.nio.reactor.ssl.SSLIOSession.doWrap(SSLIOSession.java:220) ~[puppet-server-release.jar:na]
      at org.apache.http.nio.reactor.ssl.SSLIOSession.doHandshake(SSLIOSession.java:254) ~[puppet-server-release.jar:na]
      at org.apache.http.nio.reactor.ssl.SSLIOSession.isAppInputReady(SSLIOSession.java:391) ~[puppet-server-release.jar:na]
      at org.apache.http.impl.nio.reactor.AbstractIODispatch.inputReady(AbstractIODispatch.java:119) ~[puppet-server-release.jar:na]
      at org.apache.http.impl.nio.reactor.BaseIOReactor.readable(BaseIOReactor.java:159) ~[puppet-server-release.jar:na]
      at org.apache.http.impl.nio.reactor.AbstractIOReactor.processEvent(AbstractIOReactor.java:338) ~[puppet-server-release.jar:na]
      at org.apache.http.impl.nio.reactor.AbstractIOReactor.processEvents(AbstractIOReactor.java:316) ~[puppet-server-release.jar:na]
      at org.apache.http.impl.nio.reactor.AbstractIOReactor.execute(AbstractIOReactor.java:277) ~[puppet-server-release.jar:na]
      at org.apache.http.impl.nio.reactor.BaseIOReactor.execute(BaseIOReactor.java:105) ~[puppet-server-release.jar:na]
      at org.apache.http.impl.nio.reactor.AbstractMultiworkerIOReactor$Worker.run(AbstractMultiworkerIOReactor.java:584) ~[puppet-server-release.jar:na]
      at java.lang.Thread.run(Thread.java:745) ~[na:1.7.0_71]

        Attachments

          Issue Links

            Activity

              jsd-sla-details-panel

                People

                • Assignee:
                  Unassigned
                  Reporter:
                  csschwe Chuck Schweizer
                  QA Contact:
                  Erik Dasher
                • Votes:
                  3 Vote for this issue
                  Watchers:
                  15 Start watching this issue

                  Dates

                  • Created:
                    Updated:
                    Resolved: