Awesome news Deepak, I suspected "SSL something" which is why I was asking for JDK and OpenSSL details ... be good to nail down exact revisions (and distros in case of special patching they might do) so we can get an errata out somehow - so if anyone has seen this - be kind & report! :-).
On Sat, Mar 23, 2013 at 8:32 PM, Deepak Giridharagopal <dee...@puppetlabs.com> wrote: > I was helping someone on IRC with a similar issue the other day...it looks > like there may be a bug in very recent 1.7 OpenJDK versions that cause this > to happen. Reverting to an earlier JDK version resolved the issue. As Ken > mentioned, it would be most helpful if we could get the Ruby/OpenSSL/JDK > versions from your masters and puppetdb servers. Thanks! > > > On Sat, Mar 23, 2013 at 2:04 AM, Ken Barber <k...@puppetlabs.com> wrote: >> >> Russel: Can you confirm the same error message that Hugh is receiving >> in your own puppetdb.log? >> >> Hugh: I'd suggest raising a bug with all the details: >> http://projects.puppetlabs.com/projects/puppetdb/issues/new ... >> Russell, if the problem looks the same I'd confirm it in the same >> ticket so we can correlate. The more people seeing the issue that can >> help with debugging the problem the better. At first glance any >> details around command/query frequency would be useful as well, so we >> can understand if its load related (or not). Also - details around >> exact Ruby version and distro/version, version of OpenSSL linked to >> Ruby and exact flavour/version of Java you are using with PuppetDB >> might help. >> >> Anyone else getting this same error? I have not seen it before so I >> would be curious to hear if its prevalent. >> >> ken. >> >> On Fri, Mar 22, 2013 at 6:12 PM, Hugh Cole-Baker <h...@fanduel.com> wrote: >> > On Friday, March 22, 2013 10:47:15 AM UTC, Russell Parsloe wrote: >> >> >> >> I'm running PuppetDB 1.1.1 with Puppet 3.1, both on the same server. >> >> Occasionally nodes report this error: >> >> >> >>> err: Could not retrieve catalog from remote server: Error 400 on >> >>> SERVER: >> >>> Could not retrieve resources from the PuppetDB at >> >>> puppet.mydomain.local:8081: SSL_connect SYSCALL returned=5 errno=0 >> >>> state=SSLv3 read finished A on node client-2.mydomain.local >> >> >> >> >> >> It doesn't happen on every agent run - most times it runs just fine. >> >> >> >> The names on my SSL certificates appear to be correct, aka its the same >> >> one that is used in puppet.conf. >> >> >> >> Any ideas on things I can at least check to try and track down and get >> >> rid >> >> of this error? I could understand it if the error occurred on every >> >> run, but >> >> its bugging me that its just occasional. >> > >> > >> > I'm also seeing intermittent failure reports from nodes, with the same >> > error >> > message from the master. It's normally accompanied by a message in the >> > PuppetDB logs: >> > WARN [qtp1193921293-27694] [io.nio] >> > javax.net.ssl.SSLHandshakeException: >> > Invalid Padding length: 114 >> > or >> > WARN [qtp1193921293-39] [io.nio] javax.net.ssl.SSLHandshakeException: >> > Invalid TLS padding data >> > >> > -- >> > You received this message because you are subscribed to the Google >> > Groups >> > "Puppet Users" group. >> > To unsubscribe from this group and stop receiving emails from it, send >> > an >> > email to puppet-users+unsubscr...@googlegroups.com. >> > To post to this group, send email to puppet-users@googlegroups.com. >> > Visit this group at http://groups.google.com/group/puppet-users?hl=en. >> > For more options, visit https://groups.google.com/groups/opt_out. >> > >> > >> >> -- >> You received this message because you are subscribed to the Google Groups >> "Puppet Users" group. >> To unsubscribe from this group and stop receiving emails from it, send an >> email to puppet-users+unsubscr...@googlegroups.com. >> To post to this group, send email to puppet-users@googlegroups.com. >> Visit this group at http://groups.google.com/group/puppet-users?hl=en. >> For more options, visit https://groups.google.com/groups/opt_out. >> >> > > -- > You received this message because you are subscribed to the Google Groups > "Puppet Users" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to puppet-users+unsubscr...@googlegroups.com. > To post to this group, send email to puppet-users@googlegroups.com. > Visit this group at http://groups.google.com/group/puppet-users?hl=en. > For more options, visit https://groups.google.com/groups/opt_out. > > -- You received this message because you are subscribed to the Google Groups "Puppet Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-users+unsubscr...@googlegroups.com. To post to this group, send email to puppet-users@googlegroups.com. Visit this group at http://groups.google.com/group/puppet-users?hl=en. For more options, visit https://groups.google.com/groups/opt_out.
