[Bugs] [Bug 1241784] Gluster commands timeout on SSL enabled system, after adding new node to trusted storage pool

[bugzilla at redhat.com]

https://bugzilla.redhat.com/show_bug.cgi?id=1241784



--- Comment #2 from Anand Avati <aavati at redhat.com> ---
COMMIT: http://review.gluster.org/11610 committed in release-3.7 by Atin
Mukherjee (amukherj at redhat.com) 
------
commit 1e520ff415d50e3eeb6418710314fe61e8e78e35
Author: Kaushal M <kaushal at redhat.com>
Date:   Tue Jul 7 12:52:30 2015 +0530

    glusterd: Fix management encryption issues with GlusterD

      Backport for 01b82c6 from master

    Management encryption was enabled incorrectly in GlusterD leading to
    issues of cluster deadlocks. This has been fixed with this commit. The
    fix is in two parts,

    1. Correctly enable encrytion for the TCP listener in GlusterD and
    re-enable own-threads for encrypted connections.
      Without this, GlusterD could try to esatblish the blocking SSL
      connects in the epoll thread, for eg. when handling friend updates,
      which could lead to cluster deadlocks.

    2. Explicitly enable encryption for outgoing peer connections.
      Without enabling encryption explicitly for outgoing connections was
      causing SSL socket events to be handled in the epoll thread. Some
      events, like disconnects during peer detach, could lead to connection
      attempts to happen in the epoll thread, leading to deadlocks again.

    Change-Id: I438c2b43f7b1965c0e04d95c000144118d36272c
    BUG: 1241784
    Signed-off-by: Kaushal M <kaushal at redhat.com>
    Reviewed-on: http://review.gluster.org/11610
    Tested-by: Gluster Build System <jenkins at build.gluster.com>
    Tested-by: NetBSD Build System <jenkins at build.gluster.org>
    Reviewed-by: Atin Mukherjee <amukherj at redhat.com>

-- 
You are receiving this mail because:
You are on the CC list for the bug.
Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=vxRB5hFMXs&a=cc_unsubscribe