Avoid installing the OPSWpytwist ZIP package against an HPSA infra, slice, or sat server.

  • KM02784118
  • 28-Apr-2017
  • 06-Apr-2021

Summary

Installing the OPSWpytwist ZIP package onto an infra, slice, or sat server can cause various different errors..

Error

This can cause several different kind of failure modes.  One specific failure mode is that if the newly upgraded HPSA 10.5x mesh is put into TLSv1.2 mode, and the version of OPWpytwist ZIP that is installed was from 10.2x or earlier, then the new 10.5x hub will fail to start with the following error:
 
fw-rules.py cannot fetch getDefaultHubGid from the twist.
 
The hub startup script using pytwist to connect to the twist, and this connectivity will fail as in the following example that reveals the deeper error.  (This error is obcured when attempting to start HPSA.)
 
# env PYTHONPATH=/opt/opsware/pylibs2 /opt/opsware/bin/python2 -c 'import pytwist;print pytwist.twistserver.TwistServer("localhost")._makeCall("fido/ejb/session/UserFacade","getDefaultHubGid",())'
Traceback (most recent call last):
  File "<string>", line 1, in <module>
  File "/opt/opsware/pylibs2/pytwist/twistserver.py", line 235, in _makeCall
    ctx=self.ctx, gw_list=self.to_use_gw_list)
  File "./urlopen.py", line 278, in httpUrlRequest
  File "./asyncssl.py", line 106, in connect
  File "./asyncssl.py", line 143, in _connect_inner
  File "./asyncssl.py", line 254, in ssl_connect
  File "./asyncssl.py", line 272, in _timeout_io
M2Crypto.SSL.SSLError: ('error:14077102:SSL routines:SSL23_GET_SERVER_HELLO:unsupported protocol', 336032002)

Cause

If the OPSWpytwist ZIP package is installed onto an HPSA core or satellite server, it will conflict with the built-in OPSWpytwist RPM.  The ZIP version of the package contains source files and the RPM contains only the pyc complied python files.  It is intended for use on regular managed servers.
 
When the mesh is them upgraded, the OPSWpytwist RPM will be upgraded, but the python source files from the OPSWpytwist ZIP file will remain.  If the timestamp of those python source files is newer than the newly upgraded pyc compiled python files, then the newer python compiled files will be overwritten by the older OPSWpytwist ZIP source files.

Fix

Contact MicroFocus SA support for guidance in recovering from this problem.