OpenSSL error

[tamer-shamseldin]

OneFS-95-1# isi upgrade patches list
Patch Name Description Status

9.5.0.6_LTS2023_GA-RUP_PSP-3839 Multiple Userspace and Kernel Fixes Installed
9.5.0_UGA-PATCH-INFRA_2023-03_PSP-3206 Patch Framework Fix Installed

Total: 2

OneFS-95-1# ./iht/bin/isilon_create_users --no-verify --onefs-user "root" --zone "Prod-CDH" --dist "cdp" "192.168.20.5"
Traceback (most recent call last):
File "./iht/bin/isilon_create_users", line 5, in
from isilon_hadoop_tools._scripts import isilon_create_users
File "/root/iht/lib/python3.8/site-packages/isilon_hadoop_tools/_scripts.py", line 8, in
import urllib3
File "/root/iht/lib/python3.8/site-packages/urllib3/init.py", line 41, in
raise ImportError(
ImportError: urllib3 v2 only supports OpenSSL 1.1.1+, currently the 'ssl' module is compiled with 'OpenSSL 1.0.2zh-fips 30 May 2023'. See: urllib3/urllib3#2168

[nickyruggs]

Same here... Centos 7 & Python3.8

[tucked]

This likely isn't something IHT should address directly (because the fix would be to block the newer, more secure urllib3 v2, even though IHT should otherwise be able to run with it).

IHT is still fine with urllib3 v1, though:

isilon_hadoop_tools/setup.py

Line 32 in cc9488d

"urllib3 >= 1.22.0",

So I think you should be able to work around by running this inside the virtualenv where IHT is installed:

pip install 'urllib3 < 2'

If you installed with pipx, you can inject that command:

pipx inject isilon-hadoop-tools 'urllib3 < 2'

The better solution, however, is probably to upgrade OpenSSL.

[nickyruggs]

That 'inject' worked just fine. Thanks.