Re: [ovirt-users] Issue with vdsm on EL6 nodes

From: "knarra" <knarra(a)redhat.com&gt; To: "Alon Bar-Lev" <alonbl(a)redhat.com&gt; Cc: users(a)ovirt.org Sent: Tuesday, April 7, 2015 3:39:58 PM Subject: Re: [ovirt-users] Issue with vdsm on EL6 nodes On 04/07/2015 05:58 PM, Alon Bar-Lev wrote: > > ----- Original Message ----- >> From: "knarra" <knarra(a)redhat.com&gt; >> To: "Alon Bar-Lev" <alonbl(a)redhat.com&gt; >> Cc: users(a)ovirt.org >> Sent: Tuesday, April 7, 2015 3:25:07 PM >> Subject: Re: [ovirt-users] Issue with vdsm on EL6 nodes >> >> On 04/07/2015 05:50 PM, Alon Bar-Lev wrote: >>> ----- Original Message ----- >>>> From: "knarra" <knarra(a)redhat.com&gt; >>>> To: users(a)ovirt.org >>>> Sent: Tuesday, April 7, 2015 3:15:12 PM >>>> Subject: [ovirt-users] Issue with vdsm on EL6 nodes >>>> >>> <snip> >>> >>>> SSLError: [Errno 1] _ssl.c:1390: error:1409442E:SSL >>>> routines:SSL3_READ_BYTES:tlsv1 alert protocol version >>>> >>>> Can some one help me to resolve this issue. >>> your openssl is patched to disable ssv3, and engine is trying to >>> communicate using sslv3. >>> >>> please upgrade engine to latest z-stream, it should be resolved. >> Hi Alon, >> >> I checked the following value in my database and my engine is using >> TLSv1 and not sslv3 to comminucate. I am on 3.6 master branch. >> >> engine=# select option_name,option_value from vdc_options where >> option_name = 'VdsmSSLProtocol'; >> option_name | option_value >> -----------------+-------------- >> VdsmSSLProtocol | TLSv1 >> (1 row) > hmmm.... and you say you get this when you use vdsClient, so maybe it tries > to connect using sslv3. > > is engine working proberly? yes, engine works fine, i have few other nodes where i have the same vdsm version added to same engine and i do not hit this issue there. I am just wondering how is this happening.