[Pkg-salt-team] Bug#910236: salt-master: error: Failed to load configuration: unknown error (_ssl.c:2788)

[Michael Fladischer]

Package: salt-master
Version: 2017.7.4+dfsg1-1
Severity: important

Dear Maintainer,

after a fresh install of salt-master I was unable to start it with the default
configuration, resulting in this error on startup:

salt-master: error: Failed to load configuration: unknown error (_ssl.c:2788)

Using pudb3 I was able to get this stacktrace:

Traceback (most recent call last):
  File "/usr/lib/python3/dist-packages/salt/utils/parsers.py", line 546, in process_config_dir
    self.config.update(self.setup_config())
  File "/usr/lib/python3/dist-packages/salt/utils/parsers.py", line 1754, in setup_config
    return config.master_config(self.get_config_file_path())
  File "/usr/lib/python3/dist-packages/salt/config/__init__.py", line 3546, in master_config
    apply_sdb(opts)
  File "/usr/lib/python3/dist-packages/salt/config/__init__.py", line 2346, in apply_sdb
    import salt.utils.sdb
  File "/usr/lib/python3/dist-packages/salt/utils/sdb.py", line 14, in <module>
    import salt.loader
  File "/usr/lib/python3/dist-packages/salt/loader.py", line 26, in <module>
    import salt.utils.event
  File "/usr/lib/python3/dist-packages/salt/utils/event.py", line 70, in <module>
    import tornado.iostream
  File "/usr/lib/python3/dist-packages/tornado/iostream.py", line 40, in <module>
    from tornado.netutil import ssl_wrap_socket, ssl_match_hostname, SSLCertificateError, _client_ssl_defaults, _server_ssl_defaults
  File "/usr/lib/python3/dist-packages/tornado/netutil.py", line 57, in <module>
    ssl.Purpose.SERVER_AUTH)
  File "/usr/lib/python3.6/ssl.py", line 502, in create_default_context
    context = SSLContext(PROTOCOL_TLS)
  File "/usr/lib/python3.6/ssl.py", line 391, in __new__
    self = _SSLContext.__new__(cls, protocol)
ssl.SSLError: unknown error (_ssl.c:2788)

During handling of the above exception, another exception occurred:

Traceback (most recent call last):
  File "/usr/lib/python3/dist-packages/salt/cli/daemons.py", line 132, in prepare
    super(Master, self).prepare()
  File "/usr/lib/python3/dist-packages/salt/utils/parsers.py", line 1036, in prepare
    self.parse_args()
  File "/usr/lib/python3/dist-packages/salt/utils/parsers.py", line 200, in parse_args
    process_option_func()
  File "/usr/lib/python3/dist-packages/salt/utils/parsers.py", line 549, in process_config_dir
    'Failed to load configuration: {0}'.format(exc)
  File "/usr/lib/python3/dist-packages/salt/utils/parsers.py", line 277, in error
    self.exit(salt.defaults.exitcodes.EX_USAGE, '{0}: error: {1}\n'.format(self.get_prog_name(), msg))
  File "/usr/lib/python3/dist-packages/salt/utils/parsers.py", line 268, in exit
    optparse.OptionParser.exit(self, status, msg)
  File "/usr/lib/python3.6/optparse.py", line 1559, in exit
    sys.exit(status)
SystemExit: 64

Strangely I'm unable to reproduce this behaviour by manually repeating the SSLContext creation in the Python REPL.

Regards,
Michael

-- System Information:
Debian Release: buster/sid
  APT prefers unstable
  APT policy: (500, 'unstable'), (1, 'experimental')
Architecture: amd64 (x86_64)

Kernel: Linux 4.18.0-1-amd64 (SMP w/8 CPU cores)
Locale: LANG=en_DK.UTF-8, LC_CTYPE=en_DK.UTF-8 (charmap=UTF-8), LANGUAGE=en_DK.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages salt-master depends on:
ii  adduser          3.118
ii  lsb-base         9.20170808
ii  python3          3.6.6-1
ii  python3-crypto   2.6.1-9+b1
ii  python3-systemd  234-2+b1
ii  python3-zmq      17.1.0-1
ii  salt-common      2017.7.4+dfsg1-1

Versions of packages salt-master recommends:
ii  python3-pygit2  0.27.2-1

salt-master suggests no packages.

-- no debconf information