[SSL: CERTIFICATE_VERIFY_FAILED] Certificate Verify Failed (_ssl.C:579)

最新推荐文章于 2024-03-11 21:49:50 发布
最新推荐文章于 2024-03-11 21:49:50 发布
阅读量2.8k 收藏 1
点赞数 1
文章标签： Ambari Certificate

安装HDP过程中，一直遇到问题。（一开始两个都是Failed）。网上搜索，有说是OpenSSL版本太旧要更新，更新后问题解决，但是自己的centos7尝试更新，但显示已经是最新的版本了。最终查到问题所在，是python2.7.5版本问题。网上答案详见错误代码后。）


  1. ==========================
  2. Creating target directory...
  3. ==========================
  5. Command start time 2018-02-27 09:30:03
  7. Connection to node2.jky.com closed.
  8. SSH command execution finished
  9. host=node2.jky.com, exitcode=0
  10. Command end time 2018-02-27 09:30:03
  12. ==========================
  13. Copying ambari sudo script...
  14. ==========================
  16. Command start time 2018-02-27 09:30:03
  18. scp /var/lib/ambari-server/ambari-sudo.sh
  19. host=node2.jky.com, exitcode=0
  20. Command end time 2018-02-27 09:30:03
  22. ==========================
  23. Copying common functions script...
  24. ==========================
  26. Command start time 2018-02-27 09:30:03
  28. scp /usr/lib/python2.6/site-packages/ambari_commons
  29. host=node2.jky.com, exitcode=0
  30. Command end time 2018-02-27 09:30:04
  32. ==========================
  33. Copying OS type check script...
  34. ==========================
  36. Command start time 2018-02-27 09:30:04
  38. scp /usr/lib/python2.6/site-packages/ambari_server/os_check_type.py
  39. host=node2.jky.com, exitcode=0
  40. Command end time 2018-02-27 09:30:04
  42. ==========================
  43. Running OS type check...
  44. ==========================
  46. Command start time 2018-02-27 09:30:04
  47. Cluster primary/cluster OS family is redhat7 and local/current OS family is redhat7
  49. Connection to node2.jky.com closed.
  50. SSH command execution finished
  51. host=node2.jky.com, exitcode=0
  52. Command end time 2018-02-27 09:30:04
  54. ==========================
  55. Checking 'sudo' package on remote host...
  56. ==========================
  58. Command start time 2018-02-27 09:30:04
  60. Connection to node2.jky.com closed.
  61. SSH command execution finished
  62. host=node2.jky.com, exitcode=0
  63. Command end time 2018-02-27 09:30:05
  65. ==========================
  66. Copying repo file to 'tmp' folder...
  67. ==========================
  69. Command start time 2018-02-27 09:30:05
  71. scp /etc/yum.repos.d/ambari.repo
  72. host=node2.jky.com, exitcode=0
  73. Command end time 2018-02-27 09:30:05
  75. ==========================
  76. Moving file to repo dir...
  77. ==========================
  79. Command start time 2018-02-27 09:30:05
  81. Connection to node2.jky.com closed.
  82. SSH command execution finished
  83. host=node2.jky.com, exitcode=0
  84. Command end time 2018-02-27 09:30:05
  86. ==========================
  87. Changing permissions for ambari.repo...
  88. ==========================
  90. Command start time 2018-02-27 09:30:05
  92. Connection to node2.jky.com closed.
  93. SSH command execution finished
  94. host=node2.jky.com, exitcode=0
  95. Command end time 2018-02-27 09:30:06
  97. ==========================
  98. Copying setup script file...
  99. ==========================
  101. Command start time 2018-02-27 09:30:06
  103. scp /usr/lib/python2.6/site-packages/ambari_server/setupAgent.py
  104. host=node2.jky.com, exitcode=0
  105. Command end time 2018-02-27 09:30:06
  107. ==========================
  108. Running setup agent script...
  109. ==========================
  111. Command start time 2018-02-27 09:30:06
  112. ('WARNING 2018-02-27 09:30:14,621 NetUtil.py:116 - Server at https://master.jky.com:8440 is not reachable, sleeping for 10 seconds...
  113. INFO 2018-02-27 09:30:14,621 HeartbeatHandlers.py:115 - Stop event received
  114. INFO 2018-02-27 09:30:14,621 NetUtil.py:122 - Stop event received
  115. INFO 2018-02-27 09:30:14,621 ExitHelper.py:53 - Performing cleanup before exiting...
  116. INFO 2018-02-27 09:30:14,621 ExitHelper.py:67 - Cleanup finished, exiting with code:0
  117. INFO 2018-02-27 09:30:16,903 main.py:223 - Agent died gracefully, exiting.
  118. INFO 2018-02-27 09:30:16,904 ExitHelper.py:53 - Performing cleanup before exiting...
  119. INFO 2018-02-27 09:30:17,196 main.py:90 - loglevel=logging.INFO
  120. INFO 2018-02-27 09:30:17,197 main.py:90 - loglevel=logging.INFO
  121. INFO 2018-02-27 09:30:17,197 main.py:90 - loglevel=logging.INFO
  122. INFO 2018-02-27 09:30:17,198 DataCleaner.py:39 - Data cleanup thread started
  123. INFO 2018-02-27 09:30:17,199 DataCleaner.py:120 - Data cleanup started
  124. INFO 2018-02-27 09:30:17,199 DataCleaner.py:122 - Data cleanup finished
  125. INFO 2018-02-27 09:30:17,252 PingPortListener.py:50 - Ping port listener started on port: 8670
  126. INFO 2018-02-27 09:30:17,254 main.py:349 - Connecting to Ambari server at https://master.jky.com:8440 (192.168.201.13)
  127. INFO 2018-02-27 09:30:17,254 NetUtil.py:62 - Connecting to https://master.jky.com:8440/ca
  128. ERROR 2018-02-27 09:30:17,314 NetUtil.py:88 - [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:579)
  129. ERROR 2018-02-27 09:30:17,314 NetUtil.py:89 - SSLError: Failed to connect. Please check openssl library versions.
  130. Refer to: https://bugzilla.redhat.com/show_bug.cgi?id=1022468 for more details.
  131. WARNING 2018-02-27 09:30:17,315 NetUtil.py:116 - Server at https://master.jky.com:8440 is not reachable, sleeping for 10 seconds...
  132. ', None)
  133. ('WARNING 2018-02-27 09:30:14,621 NetUtil.py:116 - Server at https://master.jky.com:8440 is not reachable, sleeping for 10 seconds...
  134. INFO 2018-02-27 09:30:14,621 HeartbeatHandlers.py:115 - Stop event received
  135. INFO 2018-02-27 09:30:14,621 NetUtil.py:122 - Stop event received
  136. INFO 2018-02-27 09:30:14,621 ExitHelper.py:53 - Performing cleanup before exiting...
  137. INFO 2018-02-27 09:30:14,621 ExitHelper.py:67 - Cleanup finished, exiting with code:0
  138. INFO 2018-02-27 09:30:16,903 main.py:223 - Agent died gracefully, exiting.
  139. INFO 2018-02-27 09:30:16,904 ExitHelper.py:53 - Performing cleanup before exiting...
  140. INFO 2018-02-27 09:30:17,196 main.py:90 - loglevel=logging.INFO
  141. INFO 2018-02-27 09:30:17,197 main.py:90 - loglevel=logging.INFO
  142. INFO 2018-02-27 09:30:17,197 main.py:90 - loglevel=logging.INFO
  143. INFO 2018-02-27 09:30:17,198 DataCleaner.py:39 - Data cleanup thread started
  144. INFO 2018-02-27 09:30:17,199 DataCleaner.py:120 - Data cleanup started
  145. INFO 2018-02-27 09:30:17,199 DataCleaner.py:122 - Data cleanup finished
  146. INFO 2018-02-27 09:30:17,252 PingPortListener.py:50 - Ping port listener started on port: 8670
  147. INFO 2018-02-27 09:30:17,254 main.py:349 - Connecting to Ambari server at https://master.jky.com:8440 (192.168.201.13)
  148. INFO 2018-02-27 09:30:17,254 NetUtil.py:62 - Connecting to https://master.jky.com:8440/ca
  149. ERROR 2018-02-27 09:30:17,314 NetUtil.py:88 - [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:579)
  150. ERROR 2018-02-27 09:30:17,314 NetUtil.py:89 - SSLError: Failed to connect. Please check openssl library versions.
  151. Refer to: https://bugzilla.redhat.com/show_bug.cgi?id=1022468 for more details.
  152. WARNING 2018-02-27 09:30:17,315 NetUtil.py:116 - Server at https://master.jky.com:8440 is not reachable, sleeping for 10 seconds...
  153. ', None)
  155. Connection to node2.jky.com closed.
  156. SSH command execution finished
  157. host=node2.jky.com, exitcode=0
  158. Command end time 2018-02-27 09:30:19
  160. Registering with the server...
  161. Registration with the server failed.

Cause:

This is due to a defect in newer releases of Python 2.7.5 which causes certificate validation to fail regardless of certificate status. 

（这是由于Python 2.7.5的新版本中存在缺陷，导致无论证书状态如何，证书验证都失败。）

Resolution Steps:

NOTE: As a workaround, we strongly recommend that Python not be updated to a version newer than python-2.7.5-48.el*.x86_64 (or downgraded to that version, if newer).

You can verify your release through python -V or python -c 'import sys; print(sys.version)' or yum list installed |grep python. You'll want to confirm that the major version is 2.7.5, the build is from Feb 2017 or older, and the full release is 2.7.5-48 or older.

Alternatively, you can disable certificate verification in Python if you wish to remain on a newer version:

sed -i 's/verify=platform_default/verify=disable/' /etc/python/cert-verification.cfg

**我用这条命令解决了问题。只需要两个节点都输入这条命令即可。本文截图只在第一个节点执行了，所以第二个节点还是failed

（注意：作为一种解决方法，我们强烈建议 不要 将Python  更新为比python-2.7.5-48.el * .x86_64更新的版本（或者降级到该版本，如果更新的话）。

你可以通过  python -V 或者  python -c'import sys; 打印（sys.version）'或  安装的yum列表| grep python。 您需要确认主要版本为2.7.5，版本为2017年2月或更早版本，完整版本为2.7.5-48或更早版本。

或者，如果您希望保留在新版本中，则可以在Python中禁用证书验证：）

*我通过python -V 只能查看到自己的python版本为2.7.5，但是不知道是否为2.7.5-48，因此没法按照他人的解决办法，把版本降至2.7.5-48，智能禁用证书验证。希望，可以有通过改变python版本的办法解决问题


解决问题参考资料：

1.https://interset.zendesk.com/hc/en-us/articles/115011874548--SSL-CERTIFICATE-VERIFY-FAILED-certificate-verify-failed-ssl-c-579-

2.https://community.hortonworks.com/questions/120861/ambari-agent-ssl-certificate-verify-failed-certifi.html

chenyiming2010
关注
  • 1
    点赞
  • 踩
  • 1
    收藏
    觉得还不错? 一键收藏
  • 0
    评论
openssl: 错误SSL routines:OPENSSL_internal:CERTIFICATE_VERIFY_FAILED
mzhan017的博客
11-15 1万+
文章目录错误envoyAWS总结的可能原因 错误 2021-11-15 03:35:51.692][359][debug][connection] [source/extensions/transport_sockets/tls/ssl_socket.cc:225] [C8] TLS error: 268435581:SSL routines:OPENSSL_internal:CERTIFICATE_VERIFY_FAILED [2021-11-15 03:35:51.692][359][debug][co
解决python打开https出现certificate verify failed的问题
12-17
今天遇到一个奇怪的问题，在用urllib打开一个https链接的时候，出现了一下报错信息：IOError: [Errno socket error] [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:727)，报错问题就是证书...
编译OpenSSL和Python出现 [SSLCertVerificationError: (1, ‘[SSL: CERTIFICATE_VERIFY_FAILED]
最新发布
u010547904的博客
03-11 364
再次使用requests脚本进行验证。文件不存在，执行以下命令链接过来。
ambari安装报错Registration with the server failed.
TURING.DT
04-13 4363
ambari2.1 HDP 2.3 安装ambari过程中，遇到个问题，耗费了我很长时间，在此记录 此问题是在安装第二步，注册主机时遇到的 Registering with the server... Registration with the server failed. 解决方法： Platforms:     RHEL / CentOS 6.5     Amba
python SSL: CERTIFICATE_VERIFY_FAILED certificate has expired 证书错误的几种情况和解决方法
永远行进
11-22 2万+
哪些情况可能会遇到这个错误？ 使用urllib.request.urlopen请求https资源时（不限系统） 使用requests的get或post方法请求https资源时（不限系统） MAC OS中使用上面任意库请求https资源时 使用pip install安装软件包时 使用setup.py upload 上传软件包到仓库时 使用其他python脚本或命令，内部使用了情况1或情况2的相关接口，访问https资源时。 请求一些https网站正常，请求另外一些https网站遇到这个错误（如从Let’s
python打开https出现certificate verify failed解决方案
追梦者的部落格
04-08 1万+
今天遇到一个奇怪的问题，在用urllib打开一个https链接的时候，出现了一下报错信息：IOError: [Errno socket error] [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:727)，报错问题就是证书验证失败，这种情况出现在网站使用的是自签名证书或系统根证书存在问题的时候。 原因： Pyt...
Python pip install之SSL异常处理操作
12-17
Retrying (Retry(total=4, connect=None, read=None, redirect=None, status=None)) after connection broken by ‘SSLError(SSLError(1, ‘[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:...
ssl-tools：用于调试SSL连接证书的Ruby工具
02-01
SSL工具 der2pem FILES... ...doctor.rb样本输出： ...OpenSSL::SSL::SSLError: SSL_connect returned=1 errno=0 state=SSLv3 read server certificate B: certificate verify failed The server presented a ce
cacerts.txt
05-28
报错third_party.fancy_urllib.InvalidCertificateException: Host storage.googleapis.com returned an invalid certificate ([SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:661)): ...
repo init 时报错 [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed
ljz0929的博客
02-14 3508
repo init 时报错 [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed 报错完整信息如下图所示： 根据网上的方法尝试了export PYTHONHTTPSVERIFY=0依旧报错 尝试如下方法，设置环境变量SSL_CERT_DIR，问题解决，不妨你也试一试。 $ sudo update-ca-certificates --fresh $ export SSL_CERT_DIR=/etc/ssl/certs ...
Ambari注册节点时报错：EOF occurred in violation of protocol (_ssl.c:579)
kongxx的专栏
12-24 2584
问题原因 Ambari在注册节点的时候，ambari-agent报错 EOF occurred in violation of protocol (_ssl.c:579) 解决办法 修改 /etc/ambari-agent/conf/ambari-agent.ini 文件，在 [security] 配置部分添加 [security] ... force_https_protocol=PROTOC...
requests https访问错误SSLError: certificate verify failed 及InsecureRequestWarning处理办法
热门推荐
mighty13的专栏
09-24 3万+
在使用requests访问某网站时，提示如下错误，Python版本为2.7.13。SSLError: [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:661)经过搜索，urllib或requests在打开https站点是会验证证书。 简单的处理办法是在get方法中加入verify参数，并设为false。reque
记录mac端下载android源码过程中的错误
qinggancha的博客
03-09 985
本文主要记录下载过程中的错误，详细的下载过程后续再补上，折腾这些错误折腾了很久，在此记录一下 repo: command not found 终端直接输入： echo 'export PATH=$PATH:$HOME/bin' >> ~/.bashrc export PATH=$PATH:$HOME/bin repo下载源码的时候卡顿： 这是因为 我们的vim ~/...
ubuntu 18.04 执行repo init时报错[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed
ljz0929的博客
02-09 2923
报错详细信息如下图所示： 根据网上的方法尝试了export PYTHONHTTPSVERIFY=0依旧报错 尝试如下方法，设置环境变量SSL_CERT_DIR，问题解决 $ sudo update-ca-certificates --fresh $ export SSL_CERT_DIR=/etc/ssl/certs
Ambari安装----Confirm Hosts Registering with the server failed解决办法
cp_panda_5的博客
04-18 8528
安装Ambari到Confirm Hosts这步过不去了！点击红色“Failed”，查看详细错误：[html] view plain copy==========================  Creating target directory...  ==========================    Command start time 2016-11-09 16:24:42   ...
错误【ssl.SSLCertVerificationError: [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed...】
qq_36717487的博客
10-22 1877
解决办法：只需要将其中的https换成http即可成功解决。
解决linux 不能访问 https 网站
li12412414的博客
01-19 3084
解决linux 不能访问 https 网站的问题。
[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: self signed certificate in certificate chain (_ssl.c:1123)
11-17
当使用urllib.urlopen打开一个https链接时，如果目标网站使用的是自签名的证书，就会抛出一个[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: self signed certificate in certificate chain (_ssl.c:1123)的错误消息。解决这个问题的方法有两种： 1.全局取消证书验证（当项目对安全性问题不太重视时，推荐使用，可以全局取消证书的验证，简易方便）： ```python import ssl ssl._create_default_https_context = ssl._create_unverified_context ``` 2.手动添加证书： ```python import ssl import urllib.request context = ssl.create_default_context() context.check_hostname = False context.verify_mode = ssl.CERT_NONE url = 'https://example.com' req = urllib.request.Request(url) response = urllib.request.urlopen(req, context=context) ```

“相关推荐”对你有帮助么？

  • 非常没帮助
  • 没帮助
  • 一般
  • 有帮助
  • 非常有帮助
提交
评论
添加红包

请填写红包祝福语或标题

个

红包个数最小为10个

元

红包金额最低5元

当前余额3.43元 前往充值 >
需支付：10.00元
成就一亿技术人!
领取后你会自动成为博主和红包主的粉丝 规则
hope_wisdom
发出的红包
实付元
使用余额支付
点击重新获取
扫码支付
钱包余额 0

抵扣说明：

1.余额是钱包充值的虚拟货币，按照1:1的比例进行支付金额的抵扣。
2.余额无法直接购买下载，可以购买VIP、付费专栏及课程。

余额充值