Riak Control

Magnus Kessler mkessler at basho.com
Wed Jun 8 04:38:04 EDT 2016


On 8 June 2016 at 00:40, satish bhatti <extropy at gmail.com> wrote:

> I am trying to run Riak Control for my Riak 1.4.12 setup on OSX.  I
> followed the instructions here:
>
> http://docs.basho.com/riak/1.4.12/ops/advanced/riak-control/
>
> for setting it up. When I try to access:
>
> https://localhost:8069/admin
>
> it generates errors in the logs, which are attached. What am I doing wrong?
>
> Satish
>
>
Hi Satish,

Your logs show these errors:

2016-06-07 16:36:55.824 [info] <0.354.0>@riak_core:wait_for_service:464
> Wait complete for service riak_kv (9 seconds)

2016-06-07 16:37:00.346 [error] <0.1952.0> gen_fsm <0.1952.0> in state
> hello terminated with reason: no function clause matching
> ssl_certificate:signature_type({1,2,840,113549,1,1,11}) line 174

2016-06-07 16:37:00.346 [error] <0.1952.0> CRASH REPORT Process <0.1952.0>
> with 0 neighbours exited with reason: no function clause matching
> ssl_certificate:signature_type({1,2,840,113549,1,1,11}) line 174 in
> gen_fsm:terminate/7 line 611
> 2016-06-07 16:37:00.346 [error] <0.86.0> Supervisor ssl_connection_sup had
> child undefined started with {ssl_connection,start_link,undefined} at
> <0.1952.0> exit with reason no function clause matching
> ssl_certificate:signature_type({1,2,840,113549,1,1,11}) line 174 in context
> child_terminated
> 2016-06-07 16:37:00.346 [error] <0.1954.0> gen_fsm <0.1954.0> in state
> hello terminated with reason: no function clause matching
> ssl_certificate:signature_type({1,2,840,113549,1,1,11}) line 174
> 2016-06-07 16:37:00.346 [error] <0.1954.0> CRASH REPORT Process <0.1954.0>
> with 0 neighbours exited with reason: no function clause matching
> ssl_certificate:signature_type({1,2,840,113549,1,1,11}) line 174 in
> gen_fsm:terminate/7 line 611
> 2016-06-07 16:37:00.346 [error] <0.86.0> Supervisor ssl_connection_sup had
> child undefined started with {ssl_connection,start_link,undefined} at
> <0.1954.0> exit with reason no function clause matching
> ssl_certificate:signature_type({1,2,840,113549,1,1,11}) line 174 in context
> child_terminated
> 2016-06-07 16:37:00.347 [error] <0.198.0> application: mochiweb, "Accept
> failed error", "{'EXIT',\n    {{function_clause,\n
> [{ssl_certificate,signature_type,\n
>  [{1,2,840,113549,1,1,11}],\n
>  [{file,\"ssl_certificate.erl\"},{line,174}]},\n
>  {ssl_cipher,filter,2,[{file,\"ssl_cipher.erl\"},{line,401}]},\n
>  {ssl_handshake,select_session,8,\n
>  [{file,\"ssl_handshake.erl\"},{line,593}]},\n
>  {ssl_handshake,hello,4,[{file,\"ssl_handshake.erl\"},{line,152}]},\n
>    {ssl_connection,hello,2,[{file,\"ssl_connection.erl\"},{line,413}]},\n
>        {ssl_connection,next_state,4,\n
>  [{file,\"ssl_connection.erl\"},{line,1929}]},\n
>  {gen_fsm,handle_msg,7,[{file,\"gen_fsm.erl\"},{line,494}]},\n
>  {proc_lib,init_p_do_apply,3,[{file,\"proc_lib.erl\"},{line,227}]}]},\n
> {gen_fsm,sync_send_all_state_event,[<0.1954.0>,start,infinity]}}}"
> 2016-06-07 16:37:00.347 [error] <0.198.0> CRASH REPORT Process <0.198.0>
> with 0 neighbours exited with reason: {error,accept_failed} in
> mochiweb_acceptor:init/3 line 34
> 2016-06-07 16:37:00.347 [error] <0.196.0>
> {mochiweb_socket_server,310,{acceptor_error,{error,accept_failed}}}
> 2016-06-07 16:37:00.347 [error] <0.197.0> application: mochiweb, "Accept
> failed error", "{'EXIT',\n    {{function_clause,\n
> [{ssl_certificate,signature_type,\n
>  [{1,2,840,113549,1,1,11}],\n
>  [{file,\"ssl_certificate.erl\"},{line,174}]},\n
>  {ssl_cipher,filter,2,[{file,\"ssl_cipher.erl\"},{line,401}]},\n
>  {ssl_handshake,select_session,8,\n
>  [{file,\"ssl_handshake.erl\"},{line,593}]},\n
>  {ssl_handshake,hello,4,[{file,\"ssl_handshake.erl\"},{line,152}]},\n
>    {ssl_connection,hello,2,[{file,\"ssl_connection.erl\"},{line,413}]},\n
>        {ssl_connection,next_state,4,\n
>  [{file,\"ssl_connection.erl\"},{line,1929}]},\n
>  {gen_fsm,handle_msg,7,[{file,\"gen_fsm.erl\"},{line,494}]},\n
>  {proc_lib,init_p_do_apply,3,[{file,\"proc_lib.erl\"},{line,227}]}]},\n
> {gen_fsm,sync_send_all_state_event,[<0.1952.0>,start,infinity]}}}"


Note the "no function clause matching ssl_certificate:signature_type" error
message. This is most likely caused by an incompatibility between the quite
old SSL implementation in OTP-15 (which is used by Riak 1.4.12) and the
certificate you generated. How did you generate your certificate? If it is
using SHA-256 as the signature algorithm, could you please try to generate
a certificate with either the SHA-1 or MD5 signature algorithm? This is
definitely not secure by modern standards, but you are dealing with
compatibility issues of an older implementation.

You may also have better luck with Riak 2.1.4, or the upcoming 2.0.7
release. A selection of SSL/TLS stability improvements has recently been
backported from the official Erlang OTP code base. Any Riak release
containing Erlang OTP-R16B02-basho10 or above will have updates to the
SSL/TLS module.

Hope this helps,

Magnus

-- 
Magnus Kessler
Client Services Engineer
Basho Technologies Limited

Registered Office - 8 Lincoln’s Inn Fields London WC2A 3BP Reg 07970431
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.basho.com/pipermail/riak-users_lists.basho.com/attachments/20160608/e75d7732/attachment-0002.html>


More information about the riak-users mailing list