SSL validation failure during hopsworks 2.3 installation

Hopsworks
#1

Hi,
During the installation of Hopsworks 2.3 we faced a problem with karamel and chefdk tools. These are some exceptions encountered:

Fetching cookbook index from https://supermarket.chef.io…
[2021-10-05T08:08:38+00:00] ERROR: SSL Validation failure connecting to host: supermarket.chef.io - SSL_connect returned=1 errno=0 state=error: certificate verify failed (unable to get local issuer certificate)
#<Thread:0x0000000003280570@/opt/chefdk/embedded/lib/ruby/gems/2.5.0/gems/berkshelf-7.0.7/lib/berkshelf/installer.rb:21 run> terminated with exception (report_on_exception is true):
Traceback (most recent call last):
8: from /opt/chefdk/embedded/lib/ruby/gems/2.5.0/gems/berkshelf-7.0.7/lib/berkshelf/installer.rb:24:in block (2 levels) in build_universe' 7: from /opt/chefdk/embedded/lib/ruby/gems/2.5.0/gems/berkshelf-7.0.7/lib/berkshelf/source.rb:85:in build_universe’
6: from /opt/chefdk/embedded/lib/ruby/gems/2.5.0/gems/berkshelf-7.0.7/lib/berkshelf/api_client/connection.rb:47:in universe' 5: from /opt/chefdk/embedded/lib/ruby/gems/2.5.0/gems/berkshelf-7.0.7/lib/berkshelf/ridley_compat.rb:37:in get’
4: from /opt/chefdk/embedded/lib/ruby/gems/2.5.0/gems/chef-14.10.9/lib/chef/http.rb:115:in get' 3: from /opt/chefdk/embedded/lib/ruby/gems/2.5.0/gems/chef-14.10.9/lib/chef/http.rb:149:in request’
2: from /opt/chefdk/embedded/lib/ruby/gems/2.5.0/gems/chef-14.10.9/lib/chef/http.rb:365:in send_http_request' 1: from /opt/chefdk/embedded/lib/ruby/gems/2.5.0/gems/chef-14.10.9/lib/chef/http.rb:408:in retrying_http_errors’
/opt/chefdk/embedded/lib/ruby/gems/2.5.0/gems/chef-14.10.9/lib/chef/http.rb:451:in `rescue in retrying_http_errors’: SSL Error connecting to https://supermarket.chef.io/universe - SSL_connect returned=1 errno=0 state=error: certificate verify failed (unable to get local issuer certificate) (OpenSSL::SSL::SSLError)
OpenSSL::SSL::SSLError SSL Error connecting to https://supermarket.chef.io/universe - SSL_connect returned=1 errno=0 state=error: certificate verify failed (unable to get local issuer certificate)

  • remote_file[/srv/hops/apache-hive/hopsworks-jars/mysql-connector-java-8.0.21-bin.jar] action create_if_missing[2021-10-04T11:31:28+00:00] ERROR: SSL Validation failure connecting to host: repo.hops.works - SSL_connect returned=1 errno=0 state=error: certificate verify failed (certificate has expired)
    ================================================================================
    Error executing action create_if_missing on resource ‘remote_file[/srv/hops/apache-hive/hopsworks-jars/mysql-connector-java-8.0.21-bin.jar]’
    ================================================================================
    OpenSSL::SSL::SSLError

SSL Error connecting to https://repo.hops.works/master/mysql-connector-java-8.0.21-bin.jar - SSL_connect returned=1 errno=0 state=error: certificate verify failed (certificate has expired)

hef Client failed. 0 resources updated in 05 seconds
[2021-10-04T10:20:55+00:00] FATAL: Stacktrace dumped to /tmp/chef-solo/chef-stacktrace.out
[2021-10-04T10:20:55+00:00] FATAL: Please provide the contents of the stacktrace.out file if you file a bug report
[2021-10-04T10:20:55+00:00] FATAL: OpenSSL::SSL::SSLError: remote_file[/tmp/chef-solo/apache-livy-0.8.0-incubating-SNAPSHOT-bin.zip] (livy::install line 64) had an error: OpenSSL::SSL::SSLError: SSL Error connecting to https://repo.hops.works/master/apache-livy-0.8.0-incubating-SNAPSHOT-bin.zip - SSL_connect returned=1 errno=0 state=error: certificate verify failed (certificate has expired)

Any help is appreciated, thank you

A.

#2

Hi @arosc

We noticed the issue as well, we are looking into it and we will post an update as soon as possible.

#3

@arosc The issue was resolved a couple of days ago, if you use Karamel directly you need to download it again. If you are using karamel-chef and deploying with vagrant, you need to pull the latest changes from the karamel-chef repo.

#4

Hi @Theo,
I confirm that the problem has been solved by downloading the latest version of karamel from the repo.

Thank you for your support

Regards