Re: [ovirt-users] Issue with vdsm on EL6 nodes

From: "knarra" <knarra(a)redhat.com&gt; To: "Alon Bar-Lev" <alonbl(a)redhat.com&gt; Cc: users(a)ovirt.org Sent: Tuesday, April 7, 2015 3:25:07 PM Subject: Re: [ovirt-users] Issue with vdsm on EL6 nodes On 04/07/2015 05:50 PM, Alon Bar-Lev wrote: > > ----- Original Message ----- >> From: "knarra" <knarra(a)redhat.com&gt; >> To: users(a)ovirt.org >> Sent: Tuesday, April 7, 2015 3:15:12 PM >> Subject: [ovirt-users] Issue with vdsm on EL6 nodes >> > <snip> > >> SSLError: [Errno 1] _ssl.c:1390: error:1409442E:SSL >> routines:SSL3_READ_BYTES:tlsv1 alert protocol version >> >> Can some one help me to resolve this issue. > your openssl is patched to disable ssv3, and engine is trying to > communicate using sslv3. > > please upgrade engine to latest z-stream, it should be resolved. Hi Alon, I checked the following value in my database and my engine is using TLSv1 and not sslv3 to comminucate. I am on 3.6 master branch. engine=# select option_name,option_value from vdc_options where option_name = 'VdsmSSLProtocol'; option_name | option_value -----------------+-------------- VdsmSSLProtocol | TLSv1 (1 row)