#2753 Dogtag stuck on ssl handshake from client connection
Closed: migrated 3 years ago by dmoluguw. Opened 6 years ago by mkubik.

During KRA installation on IPA replica, the command often freezes on this issue. Traceback shows the request to the pki instance originated inside the pki packages.

The package versions are 10.4.7-1 from @pki/10.4 COPR. The test ran on Fedora 25.

The issue is probably related to #2646 or #2644

Traceback (most recent call first):
  File "/usr/lib64/python2.7/ssl.py", line 840, in do_handshake
    self._sslobj.do_handshake()
  File "/usr/lib64/python2.7/ssl.py", line 611, in __init__
    self.do_handshake()
  File "/usr/lib64/python2.7/ssl.py", line 363, in wrap_socket
    _context=self)
  File "/usr/lib/python2.7/site-packages/requests/packages/urllib3/util/ssl_.py", line 308, in ssl_wrap_socket
    return context.wrap_socket(sock, server_hostname=server_hostname)
  File "/usr/lib/python2.7/site-packages/requests/packages/urllib3/connection.py", line 289, in connect
    ssl_version=resolved_ssl_version)
  File "/usr/lib/python2.7/site-packages/requests/packages/urllib3/connectionpool.py", line 814, in _validate_conn
    conn.connect()
  File "/usr/lib/python2.7/site-packages/requests/packages/urllib3/connectionpool.py", line 351, in _make_request
    self._validate_conn(conn)
  File "/usr/lib/python2.7/site-packages/requests/packages/urllib3/connectionpool.py", line 578, in urlopen
    chunked=chunked)
  File "/usr/lib/python2.7/site-packages/requests/adapters.py", line 403, in send
    timeout=timeout
  File "/usr/lib/python2.7/site-packages/requests/sessions.py", line 585, in send
    r = adapter.send(request, **kwargs)
  File "/usr/lib/python2.7/site-packages/requests/sessions.py", line 475, in request
    resp = self.send(prep, **send_kwargs)
  File "/usr/lib/python2.7/site-packages/requests/sessions.py", line 487, in get
    return self.request('GET', url, **kwargs)
  File "/usr/lib/python2.7/site-packages/pki/client.py", line 156, in get
    data=payload)
  File "/usr/lib/python2.7/site-packages/pki/client.py", line 43, in wrapper
    return func(self, *args, **kwargs)
  File "/usr/lib/python2.7/site-packages/pki/system.py", line 186, in get_security_domain_info
    response = self.connection.get('/rest/securityDomain/domainInfo')
  File "/usr/lib/python2.7/site-packages/ipaserver/install/dogtaginstance.py", line 56, in get_security_domain
    info = domain_client.get_security_domain_info()
  File "/usr/lib/python2.7/site-packages/ipaserver/install/dogtaginstance.py", line 67, in is_installing_replica
    info = get_security_domain()
  File "/usr/lib/python2.7/site-packages/ipaserver/install/ipa_kra_install.py", line 158, in run
    self.installing_replica = dogtaginstance.is_installing_replica("KRA")
  File "/usr/lib/python2.7/site-packages/ipapython/admintool.py", line 172, in execute
    return_value = self.run()
  File "/usr/lib/python2.7/site-packages/ipapython/admintool.py", line 149, in main
    return command.execute()
  File "/usr/lib/python2.7/site-packages/ipapython/admintool.py", line 125, in run_cli
    sys.exit(cls.main(sys.argv))
  File "/usr/sbin/ipa-kra-install", line 23, in <module>
    KRAInstall.run_cli()

Metadata Update from @mharmsen:
- Custom field component adjusted to General
- Custom field feature adjusted to ''
- Custom field origin adjusted to Community
- Custom field proposedmilestone adjusted to ''
- Custom field proposedpriority adjusted to ''
- Custom field reviewer adjusted to ''
- Custom field type adjusted to defect
- Custom field version adjusted to ''
- Issue priority set to: critical
- Issue set to the milestone: 10.4

6 years ago

Metadata Update from @mharmsen:
- Issue priority set to: None (was: critical)
- Issue set to the milestone: 0.0 NEEDS_TRIAGE (was: 10.4)

6 years ago

Metadata Update from @mharmsen:
- Issue set to the milestone: 10.4 (was: 0.0 NEEDS_TRIAGE)

6 years ago

Metadata Update from @mharmsen:
- Issue priority set to: critical

6 years ago

Moving to 10.5 -- this bug references an older Fedora 25 as well as bugs that may have been fixed since that timeframe, however, these changes may currently only be available in Fedora 27 (rawhide) builds.

Metadata Update from @mharmsen:
- Issue set to the milestone: 0.0 NEEDS_TRIAGE (was: 10.4)

6 years ago

Metadata Update from @mharmsen:
- Issue set to the milestone: 10.5 (was: 0.0 NEEDS_TRIAGE)

6 years ago

Metadata Update from @mharmsen:
- Issue priority set to: major (was: critical)

6 years ago

[20171025] - Offline Triage ==> 10.6

Metadata Update from @mharmsen:
- Issue set to the milestone: 10.6 (was: 10.5)

6 years ago

Dogtag PKI is moving from Pagure issues to GitHub issues. This means that existing or new
issues will be reported and tracked through Dogtag PKI's GitHub Issue tracker.

This issue has been cloned to GitHub and is available here:
https://github.com/dogtagpki/pki/issues/2873

If you want to receive further updates on the issue, please navigate to the
GitHub issue and click on Subscribe button.

Thank you for understanding, and we apologize for any inconvenience.

Metadata Update from @dmoluguw:
- Issue close_status updated to: migrated
- Issue status updated to: Closed (was: Open)

3 years ago

Login to comment on this ticket.

Metadata