[Pkg-salt-team] Bug#910236: salt-master: error: Failed to load configuration: unknown error (_ssl.c:2788)

[Benjamin Drung]

On Wed, 03 Oct 2018 20:00:31 +0200 Michael Fladischer <michael at fladi.at
> wrote:
> Package: salt-master
> Version: 2017.7.4+dfsg1-1
> Severity: important
> 
> Dear Maintainer,
> 
> after a fresh install of salt-master I was unable to start it with
the default
> configuration, resulting in this error on startup:
> 
> salt-master: error: Failed to load configuration: unknown error
(_ssl.c:2788)
> 
> Using pudb3 I was able to get this stacktrace:
> 
> Traceback (most recent call last):
>   File "/usr/lib/python3/dist-packages/salt/utils/parsers.py", line
546, in process_config_dir
>     self.config.update(self.setup_config())
>   File "/usr/lib/python3/dist-packages/salt/utils/parsers.py", line
1754, in setup_config
>     return config.master_config(self.get_config_file_path())
>   File "/usr/lib/python3/dist-packages/salt/config/__init__.py", line
3546, in master_config
>     apply_sdb(opts)
>   File "/usr/lib/python3/dist-packages/salt/config/__init__.py", line
2346, in apply_sdb
>     import salt.utils.sdb
>   File "/usr/lib/python3/dist-packages/salt/utils/sdb.py", line 14,
in <module>
>     import salt.loader
>   File "/usr/lib/python3/dist-packages/salt/loader.py", line 26, in
<module>
>     import salt.utils.event
>   File "/usr/lib/python3/dist-packages/salt/utils/event.py", line 70,
in <module>
>     import tornado.iostream
>   File "/usr/lib/python3/dist-packages/tornado/iostream.py", line 40,
in <module>
>     from tornado.netutil import ssl_wrap_socket, ssl_match_hostname,
SSLCertificateError, _client_ssl_defaults, _server_ssl_defaults
>   File "/usr/lib/python3/dist-packages/tornado/netutil.py", line 57,
in <module>
>     ssl.Purpose.SERVER_AUTH)
>   File "/usr/lib/python3.6/ssl.py", line 502, in
create_default_context
>     context = SSLContext(PROTOCOL_TLS)
>   File "/usr/lib/python3.6/ssl.py", line 391, in __new__
>     self = _SSLContext.__new__(cls, protocol)
> ssl.SSLError: unknown error (_ssl.c:2788)
> 
> During handling of the above exception, another exception occurred:
> 
> Traceback (most recent call last):
>   File "/usr/lib/python3/dist-packages/salt/cli/daemons.py", line
132, in prepare
>     super(Master, self).prepare()
>   File "/usr/lib/python3/dist-packages/salt/utils/parsers.py", line
1036, in prepare
>     self.parse_args()
>   File "/usr/lib/python3/dist-packages/salt/utils/parsers.py", line
200, in parse_args
>     process_option_func()
>   File "/usr/lib/python3/dist-packages/salt/utils/parsers.py", line
549, in process_config_dir
>     'Failed to load configuration: {0}'.format(exc)
>   File "/usr/lib/python3/dist-packages/salt/utils/parsers.py", line
277, in error
>     self.exit(salt.defaults.exitcodes.EX_USAGE, '{0}: error:
{1}\n'.format(self.get_prog_name(), msg))
>   File "/usr/lib/python3/dist-packages/salt/utils/parsers.py", line
268, in exit
>     optparse.OptionParser.exit(self, status, msg)
>   File "/usr/lib/python3.6/optparse.py", line 1559, in exit
>     sys.exit(status)
> SystemExit: 64
> 
> Strangely I'm unable to reproduce this behaviour by manually
repeating the SSLContext creation in the Python REPL.

Can you please retest with salt >= 2018.3.3+dfsg1-1?

-- 
Benjamin Drung
System Developer
Debian & Ubuntu Developer

1&1 IONOS Cloud GmbH | Greifswalder Str. 207 | 10405 Berlin | Germany
E-mail: benjamin.drung at cloud.ionos.com | Web: www.ionos.de

Head Office: Berlin, Germany
District Court Berlin Charlottenburg, Registration number: HRB 125506 B
Executive Management: Christoph Steffens, Matthias Steinberg, Achim
Weiss

Member of United Internet