Jira (PUP-10314) Puppet tries to print ssl information for non-ssl connections in debug mode

12 views
Skip to first unread message

Josh Cooper (JIRA)

unread,
Feb 25, 2020, 5:11:04 PM2/25/20
to puppe...@googlegroups.com
Josh Cooper created an issue
 
Puppet / Bug PUP-10314
Puppet tries to print ssl information for non-ssl connections in debug mode
Issue Type: Bug Bug
Assignee: Unassigned
Created: 2020/02/25 2:09 PM
Priority: Normal Normal
Reporter: Josh Cooper

When running in debug mode, puppet tries to print ssl information (protocol & ciphers) for each new connection, but it does it for non-ssl connections. It's unlikely to be triggered in 6.13.0 because only the CA REST APIs and PMT are using the new http client, but can be triggered via:

 

$ bx puppet module search puppetlabs-stdlib --debug --module_repository=http://localhost:8081/artifactory/api/puppet/puppet
Debug: Runtime environment: puppet_version=6.13.0, ruby_version=2.3.8, run_mode=user, default_encoding=UTF-8
Notice: Searching http://localhost:8081/artifactory/api/puppet/puppet ...
Debug: Could not find library 'pe_license' required to enable feature 'pe_license'
Debug: Creating new connection for http://localhost:8081
Debug: Starting connection for http://localhost:8081
Error: Could not connect to http://localhost:8081/artifactory/api/puppet/puppet
  There was a network communications problem
    The error we caught said 'Request to http://localhost:8081/artifactory/api/puppet/puppet/v3/modules?query=puppetlabs-stdlib failed after 0.002 seconds: undefined method `ssl_version' for #<TCPSocket:fd 9>'

The problem is a verifier is being passed to the pool in the non-ssl case, and the pool is using that to determine if the connection is ssl based or not.

Add Comment Add Comment
 
This message was sent by Atlassian JIRA (v7.7.1#77002-sha1:e75ca93)
Atlassian logo

Josh Cooper (JIRA)

unread,
Feb 25, 2020, 5:12:18 PM2/25/20
to puppe...@googlegroups.com

Josh Cooper (JIRA)

unread,
Feb 25, 2020, 5:12:23 PM2/25/20
to puppe...@googlegroups.com

Josh Cooper (JIRA)

unread,
Feb 25, 2020, 7:07:05 PM2/25/20
to puppe...@googlegroups.com

Josh Cooper (JIRA)

unread,
Feb 25, 2020, 7:07:05 PM2/25/20
to puppe...@googlegroups.com

Josh Cooper (JIRA)

unread,
Feb 25, 2020, 7:25:03 PM2/25/20
to puppe...@googlegroups.com
Josh Cooper updated an issue
Change By: Josh Cooper
Release Notes Summary: In debug mode, Puppet will now only print TLS protocols and ciphersuites for HTTPS connections, but not HTTP connections.
Release Notes: Bug Fix

Melissa Stone (Jira)

unread,
Mar 3, 2020, 12:37:04 PM3/3/20
to puppe...@googlegroups.com

Josh Cooper (Jira)

unread,
Mar 4, 2020, 2:45:04 PM3/4/20
to puppe...@googlegroups.com
Reply all
Reply to author
Forward
0 new messages