2.3. Problem: Ambari Agents may fail to register with Ambari Server.

When deploying HDP using Ambari 1.4.x or later on RHEL CentOS 6.5, click the “Failed” link on the Confirm Hosts page in the Cluster Install wizard to display the Agent logs. The following log entry indicates the SSL connection between the Agent and Server failed during registration:

INFO 2014-04-02 04:25:22,669 NetUtil.py:55 - Failed to connect to https://{ambari-server}:8440/cert/ca due to [Errno 1] _ssl.c:492: error:100AE081:elliptic curve routines:EC_GROUP_new_by_curve_name:unknown group

For more detailed information about this OpenSSL issue, see https://bugzilla.redhat.com/show_bug.cgi?id=1025598

 2.3.1. Solution:

In certain recent Linux distributions (like RHEL/Centos/Oracle Linux 6.x), the default value of nproc is lower than the value required if you are deploying the HBase service. To change this value:

  1. Check the OpenSSL library version installed on your host(s):

    rpm -qa | grep
    openssl openssl-1.0.1e-15.el6.x86_64
  2. If the output reads openssl-1.0.1e-15.x86_64 (1.0.1 build 15) you must upgrade the OpenSSL library by running the following command:

    yum upgrade openssl
  3. Verify you have the newer version of OpenSSL (1.0.1 build 16):

    rpm -qa  | grep openssl
    openssl-1.0.1e-16.el6.x86_64
  4. Restart Ambari Agent(s) and Click “Retry Failed” on the Wizard.