Dogtag stuck on ssl handshake from client connection

pki-bot commented 4 years ago

This issue was migrated from Pagure Issue #2753. Originally filed by mkubik on 2017-06-23 08:05:54:

Assigned to nobody

During KRA installation on IPA replica, the command often freezes on this issue. Traceback shows the request to the pki instance originated inside the pki packages.

The package versions are 10.4.7-1 from @pki/10.4 COPR. The test ran on Fedora 25.

The issue is probably related to 2646 or 2644

Traceback (most recent call first):
  File "/usr/lib64/python2.7/ssl.py", line 840, in do_handshake
    self._sslobj.do_handshake()
  File "/usr/lib64/python2.7/ssl.py", line 611, in __init__
    self.do_handshake()
  File "/usr/lib64/python2.7/ssl.py", line 363, in wrap_socket
    _context=self)
  File "/usr/lib/python2.7/site-packages/requests/packages/urllib3/util/ssl_.py", line 308, in ssl_wrap_socket
    return context.wrap_socket(sock, server_hostname=server_hostname)
  File "/usr/lib/python2.7/site-packages/requests/packages/urllib3/connection.py", line 289, in connect
    ssl_version=resolved_ssl_version)
  File "/usr/lib/python2.7/site-packages/requests/packages/urllib3/connectionpool.py", line 814, in _validate_conn
    conn.connect()
  File "/usr/lib/python2.7/site-packages/requests/packages/urllib3/connectionpool.py", line 351, in _make_request
    self._validate_conn(conn)
  File "/usr/lib/python2.7/site-packages/requests/packages/urllib3/connectionpool.py", line 578, in urlopen
    chunked=chunked)
  File "/usr/lib/python2.7/site-packages/requests/adapters.py", line 403, in send
    timeout=timeout
  File "/usr/lib/python2.7/site-packages/requests/sessions.py", line 585, in send
    r = adapter.send(request, **kwargs)
  File "/usr/lib/python2.7/site-packages/requests/sessions.py", line 475, in request
    resp = self.send(prep, **send_kwargs)
  File "/usr/lib/python2.7/site-packages/requests/sessions.py", line 487, in get
    return self.request('GET', url, **kwargs)
  File "/usr/lib/python2.7/site-packages/pki/client.py", line 156, in get
    data=payload)
  File "/usr/lib/python2.7/site-packages/pki/client.py", line 43, in wrapper
    return func(self, *args, **kwargs)
  File "/usr/lib/python2.7/site-packages/pki/system.py", line 186, in get_security_domain_info
    response = self.connection.get('/rest/securityDomain/domainInfo')
  File "/usr/lib/python2.7/site-packages/ipaserver/install/dogtaginstance.py", line 56, in get_security_domain
    info = domain_client.get_security_domain_info()
  File "/usr/lib/python2.7/site-packages/ipaserver/install/dogtaginstance.py", line 67, in is_installing_replica
    info = get_security_domain()
  File "/usr/lib/python2.7/site-packages/ipaserver/install/ipa_kra_install.py", line 158, in run
    self.installing_replica = dogtaginstance.is_installing_replica("KRA")
  File "/usr/lib/python2.7/site-packages/ipapython/admintool.py", line 172, in execute
    return_value = self.run()
  File "/usr/lib/python2.7/site-packages/ipapython/admintool.py", line 149, in main
    return command.execute()
  File "/usr/lib/python2.7/site-packages/ipapython/admintool.py", line 125, in run_cli
    sys.exit(cls.main(sys.argv))
  File "/usr/sbin/ipa-kra-install", line 23, in <module>
    KRAInstall.run_cli()

pki-bot commented 4 years ago

Comment from mharmsen (@mharmsen) at 2017-06-23 13:03:00

Metadata Update from @mharmsen:

Custom field component adjusted to General
Custom field feature adjusted to ''
Custom field origin adjusted to Community
Custom field proposedmilestone adjusted to ''
Custom field proposedpriority adjusted to ''
Custom field reviewer adjusted to ''
Custom field type adjusted to defect
Custom field version adjusted to ''
Issue priority set to: critical
Issue set to the milestone: 10.4

pki-bot commented 4 years ago

Comment from mharmsen (@mharmsen) at 2017-06-23 13:06:39

Metadata Update from @mharmsen:

Issue priority set to: None (was: critical)
Issue set to the milestone: 0.0 NEEDS_TRIAGE (was: 10.4)

pki-bot commented 4 years ago

Comment from mharmsen (@mharmsen) at 2017-06-28 20:07:51

Metadata Update from @mharmsen:

Issue set to the milestone: 10.4 (was: 0.0 NEEDS_TRIAGE)

pki-bot commented 4 years ago

Comment from mharmsen (@mharmsen) at 2017-06-28 20:08:04

Metadata Update from @mharmsen:

Issue priority set to: critical

pki-bot commented 4 years ago

Comment from mharmsen (@mharmsen) at 2017-08-04 13:55:53

Moving to 10.5 -- this bug references an older Fedora 25 as well as bugs that may have been fixed since that timeframe, however, these changes may currently only be available in Fedora 27 (rawhide) builds.

pki-bot commented 4 years ago

Comment from mharmsen (@mharmsen) at 2017-08-04 13:55:54

Metadata Update from @mharmsen:

Issue set to the milestone: 0.0 NEEDS_TRIAGE (was: 10.4)

pki-bot commented 4 years ago

Comment from mharmsen (@mharmsen) at 2017-08-04 13:56:07

Metadata Update from @mharmsen:

Issue set to the milestone: 10.5 (was: 0.0 NEEDS_TRIAGE)

pki-bot commented 4 years ago

Comment from mharmsen (@mharmsen) at 2017-09-25 17:02:06

Metadata Update from @mharmsen:

Issue priority set to: major (was: critical)

pki-bot commented 4 years ago

Comment from mharmsen (@mharmsen) at 2017-10-25 13:19:25

[20171025] - Offline Triage ==> 10.6

pki-bot commented 4 years ago

Comment from mharmsen (@mharmsen) at 2017-10-25 13:19:30

Metadata Update from @mharmsen:

Issue set to the milestone: 10.6 (was: 10.5)

pki-bot / pki-issues-final

Dogtag stuck on ssl handshake from client connection #2302