Foreman-Proxy OpenSSL::SSL::SSLError

Daniel-Vaz · August 8, 2019, 9:16am

Problem:
After a successful installation of foreman in the logs I get the following errors everyday around 03:00AM:

2019-08-08T04:30:59 [E] OpenSSL::SSL::SSLError: SSL_accept returned=1 errno=0 state=SSLv2/v3 read client hello A: http request
/usr/share/ruby/openssl/ssl.rb:280:in accept' 2019-08-08T04:31:04 [E] OpenSSL::SSL::SSLError: SSL_accept SYSCALL returned=5 errno=0 state=SSLv2/v3 read client hello A /usr/share/ruby/openssl/ssl.rb:280:in accept’
2019-08-08T04:31:04 [E] OpenSSL::SSL::SSLError: SSL_accept returned=1 errno=0 state=SSLv2/v3 read client hello A: unknown protocol
/usr/share/ruby/openssl/ssl.rb:280:in accept' 2019-08-08T04:31:04 [E] OpenSSL::SSL::SSLError: SSL_accept returned=1 errno=0 state=SSLv2/v3 read client hello A: unknown protocol /usr/share/ruby/openssl/ssl.rb:280:in accept’
2019-08-08T04:31:04 [E] OpenSSL::SSL::SSLError: SSL_accept returned=1 errno=0 state=SSLv2/v3 read client hello A: unknown protocol
/usr/share/ruby/openssl/ssl.rb:280:in accept' 2019-08-08T04:31:04 [E] OpenSSL::SSL::SSLError: SSL_accept returned=1 errno=0 state=SSLv2/v3 read client hello A: unknown protocol /usr/share/ruby/openssl/ssl.rb:280:in accept’
2019-08-08T04:31:04 [E] OpenSSL::SSL::SSLError: SSL_accept returned=1 errno=0 state=SSLv2/v3 read client hello A: unknown protocol
/usr/share/ruby/openssl/ssl.rb:280:in accept' 2019-08-08T04:31:11 [E] OpenSSL::SSL::SSLError: SSL_accept SYSCALL returned=5 errno=0 state=SSLv2/v3 read client hello A /usr/share/ruby/openssl/ssl.rb:280:in accept’
2019-08-08T04:31:11 [E] OpenSSL::SSL::SSLError: SSL_accept returned=1 errno=0 state=SSLv2/v3 read client hello A: unknown protocol
/usr/share/ruby/openssl/ssl.rb:280:in accept' 2019-08-08T04:31:11 [E] OpenSSL::SSL::SSLError: SSL_accept returned=1 errno=0 state=SSLv2/v3 read client hello A: unknown protocol /usr/share/ruby/openssl/ssl.rb:280:in accept’
2019-08-08T04:31:11 [E] OpenSSL::SSL::SSLError: SSL_accept returned=1 errno=0 state=SSLv2/v3 read client hello A: unknown protocol
/usr/share/ruby/openssl/ssl.rb:280:in accept' 2019-08-08T04:31:11 [E] OpenSSL::SSL::SSLError: SSL_accept returned=1 errno=0 state=SSLv2/v3 read client hello A: unknown protocol /usr/share/ruby/openssl/ssl.rb:280:in accept’
2019-08-08T04:31:11 [E] OpenSSL::SSL::SSLError: SSL_accept returned=1 errno=0 state=SSLv2/v3 read client hello A: http request
/usr/share/ruby/openssl/ssl.rb:280:in accept' 2019-08-08T04:31:16 [E] OpenSSL::SSL::SSLError: SSL_accept SYSCALL returned=5 errno=0 state=SSLv2/v3 read client hello A /usr/share/ruby/openssl/ssl.rb:280:in accept’
2019-08-08T04:31:16 [E] OpenSSL::SSL::SSLError: SSL_accept returned=1 errno=0 state=SSLv2/v3 read client hello A: unknown protocol
/usr/share/ruby/openssl/ssl.rb:280:in accept' 2019-08-08T04:31:16 [E] OpenSSL::SSL::SSLError: SSL_accept returned=1 errno=0 state=SSLv2/v3 read client hello A: unknown protocol /usr/share/ruby/openssl/ssl.rb:280:in accept’
2019-08-08T04:31:16 [E] OpenSSL::SSL::SSLError: SSL_accept returned=1 errno=0 state=SSLv2/v3 read client hello A: unknown protocol
/usr/share/ruby/openssl/ssl.rb:280:in accept' 2019-08-08T04:31:16 [E] OpenSSL::SSL::SSLError: SSL_accept returned=1 errno=0 state=SSLv2/v3 read client hello A: unknown protocol /usr/share/ruby/openssl/ssl.rb:280:in accept’
2019-08-08T04:31:16 [E] OpenSSL::SSL::SSLError: SSL_accept returned=1 errno=0 state=SSLv2/v3 read client hello A: unknown protocol
/usr/share/ruby/openssl/ssl.rb:280:in accept' 2019-08-08T04:31:16 [E] OpenSSL::SSL::SSLError: SSL_accept returned=1 errno=0 state=SSLv2/v3 read client hello A: unknown protocol /usr/share/ruby/openssl/ssl.rb:280:in accept’
2019-08-08T04:31:16 [E] OpenSSL::SSL::SSLError: SSL_accept returned=1 errno=0 state=SSLv2/v3 read client hello A: unknown protocol
/usr/share/ruby/openssl/ssl.rb:280:in accept' 2019-08-08T04:31:16 [E] OpenSSL::SSL::SSLError: SSL_accept returned=1 errno=0 state=SSLv2/v3 read client hello A: unknown protocol /usr/share/ruby/openssl/ssl.rb:280:in accept’
2019-08-08T04:31:16 [E] OpenSSL::SSL::SSLError: SSL_accept returned=1 errno=0 state=SSLv2/v3 read client hello A: unknown protocol
/usr/share/ruby/openssl/ssl.rb:280:in accept' 2019-08-08T04:31:21 [E] OpenSSL::SSL::SSLError: SSL_accept SYSCALL returned=5 errno=0 state=SSLv2/v3 read client hello A /usr/share/ruby/openssl/ssl.rb:280:in accept’
2019-08-08T04:31:53 [D] Starting allocated ip addresses cleanup pass…
2019-08-08T04:32:35 [E] OpenSSL::SSL::SSLError: SSL_accept returned=1 errno=0 state=SSLv2/v3 read client hello A: unknown protocol
/usr/share/ruby/openssl/ssl.rb:280:in accept' 2019-08-08T04:32:48 [D] accept: ::ffff:10.114.167.5:521 2019-08-08T04:32:53 [D] close: ::ffff:10.114.167.5:521 2019-08-08T04:32:53 [D] Starting allocated ip addresses cleanup pass... 2019-08-08T04:32:58 [E] OpenSSL::SSL::SSLError: SSL_accept SYSCALL returned=5 errno=0 state=SSLv2/v3 read client hello A /usr/share/ruby/openssl/ssl.rb:280:in accept’

I have a installation whit the following setup:

Server1 = Foreman , Foreman-proxy;
Server2 = Puppet Master;
Servevr3 = RemoteDB

Foreman-proxy settings.yml:

:ssl_ca_file: /etc/puppetlabs/puppet/ssl/certs/ca.pem
:ssl_certificate: /etc/puppetlabs/puppet/ssl/certs/pkpsdc24.telecom.pt.pem
:ssl_private_key: /etc/puppetlabs/puppet/ssl/private_keys/pkpsdc24.telecom.pt.pem

Files:

[root@pkpsdc24 foreman-proxy]# ll /etc/puppetlabs/puppet/ssl/certs/
total 8
-rw-r–r–+ 1 puppet puppet 1968 Aug 5 12:03 ca.pem
-rw-r–r–+ 1 puppet puppet 1968 Aug 5 12:03 pkpsdc24.telecom.pt.pem
[root@pkpsdc24 foreman-proxy]# ll /etc/puppetlabs/puppet/ssl/private_keys/
total 4
-rw-r-----+ 1 puppet puppet 3243 Aug 5 11:58 pkpsdc24.telecom.pt.pem

The user foreman and foreman-proxy bellong to the group puppet.

Expected outcome:
No errors being reported.

Foreman and Proxy versions:
foreman-1.21.3-1.el7.noarch
foreman-proxy-1.21.3-1.el7.noarch
puppet-agent-5.5.16-1.el7.x86_64

Anyone khows how can I overome this errors or what do they mean ?

Daniel-Vaz · August 9, 2019, 8:23am

UPDATE:

Tried the proposed solution in the Bug #14719, were it is suggested to comment the following lines in the foreman-proxy lib/launcher.rb file:

#ssl_options |= OpenSSL::SSL::OP_NO_SSLv2 if defined?(OpenSSL::SSL::OP_NO_SSLv2)
#ssl_options |= OpenSSL::SSL::OP_NO_SSLv3 if defined?(OpenSSL::SSL::OP_NO_SSLv3)
#ssl_options |= OpenSSL::SSL::OP_NO_TLSv1 if defined?(OpenSSL::SSL::OP_NO_TLSv1)

But to no avail. Yesterday the same errors appeared:

2019-08-09T04:38:03 [E] OpenSSL::SSL::SSLError: SSL_accept returned=1 errno=0 state=SSLv2/v3 read client hello A: http request
/usr/share/ruby/openssl/ssl.rb:280:in accept' 2019-08-09T04:38:08 [E] OpenSSL::SSL::SSLError: SSL_accept SYSCALL returned=5 errno=0 state=SSLv2/v3 read client hello A /usr/share/ruby/openssl/ssl.rb:280:in accept’
2019-08-09T04:38:08 [E] OpenSSL::SSL::SSLError: SSL_accept returned=1 errno=0 state=SSLv2/v3 read client hello A: unknown protocol
/usr/share/ruby/openssl/ssl.rb:280:in accept' 2019-08-09T04:38:08 [E] OpenSSL::SSL::SSLError: SSL_accept returned=1 errno=0 state=SSLv2/v3 read client hello A: unknown protocol /usr/share/ruby/openssl/ssl.rb:280:in accept’
2019-08-09T04:38:08 [E] OpenSSL::SSL::SSLError: SSL_accept returned=1 errno=0 state=SSLv2/v3 read client hello A: unknown protocol
/usr/share/ruby/openssl/ssl.rb:280:in accept' 2019-08-09T04:38:08 [E] OpenSSL::SSL::SSLError: SSL_accept returned=1 errno=0 state=SSLv2/v3 read client hello A: unknown protocol /usr/share/ruby/openssl/ssl.rb:280:in accept’
2019-08-09T04:38:08 [E] OpenSSL::SSL::SSLError: SSL_accept returned=1 errno=0 state=SSLv2/v3 read client hello A: unknown protocol
/usr/share/ruby/openssl/ssl.rb:280:in accept' 2019-08-09T04:38:15 [E] OpenSSL::SSL::SSLError: SSL_accept SYSCALL returned=5 errno=0 state=SSLv2/v3 read client hello A /usr/share/ruby/openssl/ssl.rb:280:in accept’
2019-08-09T04:38:15 [E] OpenSSL::SSL::SSLError: SSL_accept returned=1 errno=0 state=error: wrong version number
/usr/share/ruby/openssl/ssl.rb:280:in accept' 2019-08-09T04:38:15 [D] accept: ::ffff:10.114.167.5:39050 2019-08-09T04:38:21 [E] bad Request-Line ‘.
2019-08-09T04:38:21 [D] close: ::ffff:10.114.167.5:39050
2019-08-09T04:38:21 [D] accept: ::ffff:10.114.167.5:39102
2019-08-09T04:38:21 [D] Rack::Handler::WEBrick is invoked.
2019-08-09T04:38:21 503941a3 [I] Started GET /
2019-08-09T04:38:21 503941a3 [I] Finished GET / with 404 (0.54 ms)
2019-08-09T04:38:21 [D] close: ::ffff:10.114.167.5:39102
2019-08-09T04:38:21 [D] accept: ::ffff:10.114.167.5:39104
2019-08-09T04:38:21 [D] Rack::Handler::WEBrick is invoked.
2019-08-09T04:38:21 32d188b3 [I] Started OPTIONS /
2019-08-09T04:38:21 32d188b3 [I] Finished OPTIONS / with 404 (0.26 ms)
2019-08-09T04:38:21 [D] close: ::ffff:10.114.167.5:39104
2019-08-09T04:38:21 [D] accept: ::ffff:10.114.167.5:39106
2019-08-09T04:38:21 [E] bad Request-Line OPTIONS / RTSP/1.0'. 2019-08-09T04:38:21 [D] close: ::ffff:10.114.167.5:39106 2019-08-09T04:38:21 [D] accept: ::ffff:10.114.167.5:39112 2019-08-09T04:38:24 [D] Starting allocated ip addresses cleanup pass... 2019-08-09T04:38:26 [E] <ArgumentError> comparison of Fixnum with nil failed /usr/share/ruby/openssl/buffering.rb:210:in each’
/usr/share/ruby/openssl/buffering.rb:210:in min' /usr/share/ruby/openssl/buffering.rb:210:in gets’
/usr/share/ruby/webrick/httprequest.rb:519:in block in _read_data' /usr/share/ruby/webrick/utils.rb:239:in timeout’
/usr/share/ruby/webrick/httprequest.rb:518:in _read_data' /usr/share/ruby/webrick/httprequest.rb:529:in read_line’
/usr/share/ruby/webrick/httprequest.rb:416:in read_request_line' /usr/share/ruby/webrick/httprequest.rb:200:in parse’
/usr/share/ruby/webrick/https.rb:50:in parse' /usr/share/ruby/webrick/httpserver.rb:81:in run’
/usr/share/ruby/webrick/server.rb:295:in block in start_thread' /usr/share/gems/gems/logging-2.2.2/lib/logging/diagnostic_context.rb:474:in call’
/usr/share/gems/gems/logging-2.2.2/lib/logging/diagnostic_context.rb:474:in block in create_with_logging_context' 2019-08-09T04:38:26 [D] close: ::ffff:10.114.167.5:39112 2019-08-09T04:38:26 [D] accept: ::ffff:10.114.167.5:39140 2019-08-09T04:38:31 [E] <ArgumentError> comparison of Fixnum with nil failed /usr/share/ruby/openssl/buffering.rb:210:in each’
/usr/share/ruby/openssl/buffering.rb:210:in min' /usr/share/ruby/openssl/buffering.rb:210:in gets’
/usr/share/ruby/webrick/httprequest.rb:519:in block in _read_data' /usr/share/ruby/webrick/utils.rb:239:in timeout’
/usr/share/ruby/webrick/httprequest.rb:518:in _read_data' /usr/share/ruby/webrick/httprequest.rb:529:in read_line’
/usr/share/ruby/webrick/httprequest.rb:416:in read_request_line' /usr/share/ruby/webrick/httprequest.rb:200:in parse’
/usr/share/ruby/webrick/https.rb:50:in parse' /usr/share/ruby/webrick/httpserver.rb:81:in run’
/usr/share/ruby/webrick/server.rb:295:in block in start_thread' /usr/share/gems/gems/logging-2.2.2/lib/logging/diagnostic_context.rb:474:in call’
/usr/share/gems/gems/logging-2.2.2/lib/logging/diagnostic_context.rb:474:in block in create_with_logging_context' 2019-08-09T04:38:31 [D] close: ::ffff:10.114.167.5:39140 2019-08-09T04:38:31 [D] accept: ::ffff:10.114.167.5:39236 2019-08-09T04:38:36 [E] <ArgumentError> comparison of Fixnum with nil failed /usr/share/ruby/openssl/buffering.rb:210:in each’
/usr/share/ruby/openssl/buffering.rb:210:in min' /usr/share/ruby/openssl/buffering.rb:210:in gets’
/usr/share/ruby/webrick/httprequest.rb:519:in block in _read_data' /usr/share/ruby/webrick/utils.rb:239:in timeout’
/usr/share/ruby/webrick/httprequest.rb:518:in _read_data' /usr/share/ruby/webrick/httprequest.rb:529:in read_line’
/usr/share/ruby/webrick/httprequest.rb:416:in read_request_line' /usr/share/ruby/webrick/httprequest.rb:200:in parse’
/usr/share/ruby/webrick/https.rb:50:in parse' /usr/share/ruby/webrick/httpserver.rb:81:in run’
/usr/share/ruby/webrick/server.rb:295:in block in start_thread' /usr/share/gems/gems/logging-2.2.2/lib/logging/diagnostic_context.rb:474:in call’
/usr/share/gems/gems/logging-2.2.2/lib/logging/diagnostic_context.rb:474:in block in create_with_logging_context' 2019-08-09T04:38:36 [D] close: ::ffff:10.114.167.5:39236 2019-08-09T04:38:36 [D] accept: ::ffff:10.114.167.5:39338 2019-08-09T04:38:36 [E] bad Request-Line HELP’.
2019-08-09T04:38:36 [D] close: ::ffff:10.114.167.5:39338
2019-08-09T04:38:36 [D] accept: ::ffff:10.114.167.5:39340
2019-08-09T04:38:36 [E] bad Request-Line S O ?G×÷º,îê²~ó ý‚{¹Õ–Èw›æÄÛ<=Ûoïn ( ‘.
2019-08-09T04:38:36 [D] close: ::ffff:10.114.167.5:39340
2019-08-09T04:38:36 [D] accept: ::ffff:10.114.167.5:39342
2019-08-09T04:38:36 [E] bad Request-Line qjn0k¡¢'. 2019-08-09T04:38:36 [D] close: ::ffff:10.114.167.5:39342 2019-08-09T04:38:37 [D] accept: ::ffff:10.114.167.5:39344 2019-08-09T04:38:42 [E] <ArgumentError> comparison of Fixnum with nil failed /usr/share/ruby/openssl/buffering.rb:210:ineach’
/usr/share/ruby/openssl/buffering.rb:210:in min' /usr/share/ruby/openssl/buffering.rb:210:in gets’
/usr/share/ruby/webrick/httprequest.rb:519:in block in _read_data' /usr/share/ruby/webrick/utils.rb:239:in timeout’
/usr/share/ruby/webrick/httprequest.rb:518:in _read_data' /usr/share/ruby/webrick/httprequest.rb:529:in read_line’
/usr/share/ruby/webrick/httprequest.rb:416:in read_request_line' /usr/share/ruby/webrick/httprequest.rb:200:in parse’
/usr/share/ruby/webrick/https.rb:50:in parse' /usr/share/ruby/webrick/httpserver.rb:81:in run’
/usr/share/ruby/webrick/server.rb:295:in block in start_thread' /usr/share/gems/gems/logging-2.2.2/lib/logging/diagnostic_context.rb:474:in call’
/usr/share/gems/gems/logging-2.2.2/lib/logging/diagnostic_context.rb:474:in block in create_with_logging_context' 2019-08-09T04:38:42 [D] close: ::ffff:10.114.167.5:39344 2019-08-09T04:38:42 [D] accept: ::ffff:10.114.167.5:39464 2019-08-09T04:38:47 [E] <ArgumentError> comparison of Fixnum with nil failed /usr/share/ruby/openssl/buffering.rb:210:in each’
/usr/share/ruby/openssl/buffering.rb:210:in min' /usr/share/ruby/openssl/buffering.rb:210:in gets’
/usr/share/ruby/webrick/httprequest.rb:519:in block in _read_data' /usr/share/ruby/webrick/utils.rb:239:in timeout’
/usr/share/ruby/webrick/httprequest.rb:518:in _read_data' /usr/share/ruby/webrick/httprequest.rb:529:in read_line’
/usr/share/ruby/webrick/httprequest.rb:416:in read_request_line' /usr/share/ruby/webrick/httprequest.rb:200:in parse’
/usr/share/ruby/webrick/https.rb:50:in parse' /usr/share/ruby/webrick/httpserver.rb:81:in run’
/usr/share/ruby/webrick/server.rb:295:in block in start_thread' /usr/share/gems/gems/logging-2.2.2/lib/logging/diagnostic_context.rb:474:in call’
/usr/share/gems/gems/logging-2.2.2/lib/logging/diagnostic_context.rb:474:in block in create_with_logging_context' 2019-08-09T04:38:47 [D] close: ::ffff:10.114.167.5:39464 2019-08-09T04:38:47 [D] accept: ::ffff:10.114.167.5:39566 2019-08-09T04:38:47 [D] Rack::Handler::WEBrick is invoked. 2019-08-09T04:38:47 632c4357 [I] Started GET /nice%20ports%2C/Tri%6Eity.txt.bak 2019-08-09T04:38:47 632c4357 [I] Finished GET /nice%20ports%2C/Tri%6Eity.txt.bak with 404 (0.53 ms) 2019-08-09T04:38:47 [D] close: ::ffff:10.114.167.5:39566 2019-08-09T04:38:47 [D] accept: ::ffff:10.114.167.5:39568 2019-08-09T04:38:47 [E] bad Request-Line default’.
2019-08-09T04:38:47 [D] close: ::ffff:10.114.167.5:39568
2019-08-09T04:38:47 [D] accept: ::ffff:10.114.167.5:39570
2019-08-09T04:38:52 [E] comparison of Fixnum with nil failed
/usr/share/ruby/openssl/buffering.rb:210:in each' /usr/share/ruby/openssl/buffering.rb:210:in min’
/usr/share/ruby/openssl/buffering.rb:210:in gets' /usr/share/ruby/webrick/httprequest.rb:519:in block in _read_data’
/usr/share/ruby/webrick/utils.rb:239:in timeout' /usr/share/ruby/webrick/httprequest.rb:518:in _read_data’
/usr/share/ruby/webrick/httprequest.rb:529:in read_line' /usr/share/ruby/webrick/httprequest.rb:416:in read_request_line’
/usr/share/ruby/webrick/httprequest.rb:200:in parse' /usr/share/ruby/webrick/https.rb:50:in parse’
/usr/share/ruby/webrick/httpserver.rb:81:in run' /usr/share/ruby/webrick/server.rb:295:in block in start_thread’
/usr/share/gems/gems/logging-2.2.2/lib/logging/diagnostic_context.rb:474:in call' /usr/share/gems/gems/logging-2.2.2/lib/logging/diagnostic_context.rb:474:in block in create_with_logging_context’
2019-08-09T04:38:52 [D] close: ::ffff:10.114.167.5:39570
2019-08-09T04:38:52 [D] accept: ::ffff:10.114.167.5:39626
2019-08-09T04:38:52 [E] bad Request-Line OPTIONS sip:nm SIP/2.0'. 2019-08-09T04:38:52 [D] close: ::ffff:10.114.167.5:39626 2019-08-09T04:38:52 [D] accept: ::ffff:10.114.167.5:39628 2019-08-09T04:38:57 [E] <ArgumentError> comparison of Fixnum with nil failed /usr/share/ruby/openssl/buffering.rb:210:in each’
/usr/share/ruby/openssl/buffering.rb:210:in min' /usr/share/ruby/openssl/buffering.rb:210:in gets’
/usr/share/ruby/webrick/httprequest.rb:519:in block in _read_data' /usr/share/ruby/webrick/utils.rb:239:in timeout’
/usr/share/ruby/webrick/httprequest.rb:518:in _read_data' /usr/share/ruby/webrick/httprequest.rb:529:in read_line’
/usr/share/ruby/webrick/httprequest.rb:416:in read_request_line' /usr/share/ruby/webrick/httprequest.rb:200:in parse’
/usr/share/ruby/webrick/https.rb:50:in parse' /usr/share/ruby/webrick/httpserver.rb:81:in run’
/usr/share/ruby/webrick/server.rb:295:in block in start_thread' /usr/share/gems/gems/logging-2.2.2/lib/logging/diagnostic_context.rb:474:in call’
/usr/share/gems/gems/logging-2.2.2/lib/logging/diagnostic_context.rb:474:in block in create_with_logging_context' 2019-08-09T04:38:57 [D] close: ::ffff:10.114.167.5:39628 2019-08-09T04:38:57 [D] accept: ::ffff:10.114.167.5:39650 2019-08-09T04:39:02 [E] <ArgumentError> comparison of Fixnum with nil failed /usr/share/ruby/openssl/buffering.rb:210:in each’
/usr/share/ruby/openssl/buffering.rb:210:in min' /usr/share/ruby/openssl/buffering.rb:210:in gets’
/usr/share/ruby/webrick/httprequest.rb:519:in block in _read_data' /usr/share/ruby/webrick/utils.rb:239:in timeout’
/usr/share/ruby/webrick/httprequest.rb:518:in _read_data' /usr/share/ruby/webrick/httprequest.rb:529:in read_line’
/usr/share/ruby/webrick/httprequest.rb:416:in read_request_line' /usr/share/ruby/webrick/httprequest.rb:200:in parse’
/usr/share/ruby/webrick/https.rb:50:in parse' /usr/share/ruby/webrick/httpserver.rb:81:in run’
/usr/share/ruby/webrick/server.rb:295:in block in start_thread' /usr/share/gems/gems/logging-2.2.2/lib/logging/diagnostic_context.rb:474:in call’
/usr/share/gems/gems/logging-2.2.2/lib/logging/diagnostic_context.rb:474:in block in create_with_logging_context' 2019-08-09T04:39:02 [D] close: ::ffff:10.114.167.5:39650 2019-08-09T04:39:02 [D] accept: ::ffff:10.114.167.5:39652 2019-08-09T04:39:07 [E] <ArgumentError> comparison of Fixnum with nil failed /usr/share/ruby/openssl/buffering.rb:210:in each’
/usr/share/ruby/openssl/buffering.rb:210:in min' /usr/share/ruby/openssl/buffering.rb:210:in gets’
/usr/share/ruby/webrick/httprequest.rb:519:in block in _read_data' /usr/share/ruby/webrick/utils.rb:239:in timeout’
/usr/share/ruby/webrick/httprequest.rb:518:in _read_data' /usr/share/ruby/webrick/httprequest.rb:529:in read_line’
/usr/share/ruby/webrick/httprequest.rb:416:in read_request_line' /usr/share/ruby/webrick/httprequest.rb:200:in parse’
/usr/share/ruby/webrick/https.rb:50:in parse' /usr/share/ruby/webrick/httpserver.rb:81:in run’
/usr/share/ruby/webrick/server.rb:295:in block in start_thread' /usr/share/gems/gems/logging-2.2.2/lib/logging/diagnostic_context.rb:474:in call’
/usr/share/gems/gems/logging-2.2.2/lib/logging/diagnostic_context.rb:474:in block in create_with_logging_context' 2019-08-09T04:39:07 [D] close: ::ffff:10.114.167.5:39652 2019-08-09T04:39:07 [D] accept: ::ffff:10.114.167.5:39654 2019-08-09T04:39:12 [E] <ArgumentError> comparison of Fixnum with nil failed /usr/share/ruby/openssl/buffering.rb:210:in each’
/usr/share/ruby/openssl/buffering.rb:210:in min' /usr/share/ruby/openssl/buffering.rb:210:in gets’
/usr/share/ruby/webrick/httprequest.rb:519:in block in _read_data' /usr/share/ruby/webrick/utils.rb:239:in timeout’
/usr/share/ruby/webrick/httprequest.rb:518:in _read_data' /usr/share/ruby/webrick/httprequest.rb:529:in read_line’
/usr/share/ruby/webrick/httprequest.rb:416:in read_request_line' /usr/share/ruby/webrick/httprequest.rb:200:in parse’
/usr/share/ruby/webrick/https.rb:50:in parse' /usr/share/ruby/webrick/httpserver.rb:81:in run’
/usr/share/ruby/webrick/server.rb:295:in block in start_thread' /usr/share/gems/gems/logging-2.2.2/lib/logging/diagnostic_context.rb:474:in call’
/usr/share/gems/gems/logging-2.2.2/lib/logging/diagnostic_context.rb:474:in block in create_with_logging_context' 2019-08-09T04:39:12 [D] close: ::ffff:10.114.167.5:39654 2019-08-09T04:39:12 [D] accept: ::ffff:10.114.167.5:39656 2019-08-09T04:39:17 [E] <ArgumentError> comparison of Fixnum with nil failed /usr/share/ruby/openssl/buffering.rb:210:in each’
/usr/share/ruby/openssl/buffering.rb:210:in min' /usr/share/ruby/openssl/buffering.rb:210:in gets’
/usr/share/ruby/webrick/httprequest.rb:519:in block in _read_data' /usr/share/ruby/webrick/utils.rb:239:in timeout’
/usr/share/ruby/webrick/httprequest.rb:518:in _read_data' /usr/share/ruby/webrick/httprequest.rb:529:in read_line’
/usr/share/ruby/webrick/httprequest.rb:416:in read_request_line' /usr/share/ruby/webrick/httprequest.rb:200:in parse’
/usr/share/ruby/webrick/https.rb:50:in parse' /usr/share/ruby/webrick/httpserver.rb:81:in run’
/usr/share/ruby/webrick/server.rb:295:in block in start_thread' /usr/share/gems/gems/logging-2.2.2/lib/logging/diagnostic_context.rb:474:in call’
/usr/share/gems/gems/logging-2.2.2/lib/logging/diagnostic_context.rb:474:in block in create_with_logging_context' 2019-08-09T04:39:17 [D] close: ::ffff:10.114.167.5:39656 2019-08-09T04:39:17 [D] accept: ::ffff:10.114.167.5:39658 2019-08-09T04:39:22 [E] <ArgumentError> comparison of Fixnum with nil failed /usr/share/ruby/openssl/buffering.rb:210:in each’
/usr/share/ruby/openssl/buffering.rb:210:in min' /usr/share/ruby/openssl/buffering.rb:210:in gets’
/usr/share/ruby/webrick/httprequest.rb:519:in block in _read_data' /usr/share/ruby/webrick/utils.rb:239:in timeout’
/usr/share/ruby/webrick/httprequest.rb:518:in _read_data' /usr/share/ruby/webrick/httprequest.rb:529:in read_line’
/usr/share/ruby/webrick/httprequest.rb:416:in read_request_line' /usr/share/ruby/webrick/httprequest.rb:200:in parse’
/usr/share/ruby/webrick/https.rb:50:in parse' /usr/share/ruby/webrick/httpserver.rb:81:in run’
/usr/share/ruby/webrick/server.rb:295:in block in start_thread' /usr/share/gems/gems/logging-2.2.2/lib/logging/diagnostic_context.rb:474:in call’
/usr/share/gems/gems/logging-2.2.2/lib/logging/diagnostic_context.rb:474:in block in create_with_logging_context' 2019-08-09T04:39:22 [D] close: ::ffff:10.114.167.5:39658 2019-08-09T04:39:22 [D] accept: ::ffff:10.114.167.5:39660 2019-08-09T04:39:24 [D] Starting allocated ip addresses cleanup pass... 2019-08-09T04:39:27 [E] <ArgumentError> comparison of Fixnum with nil failed /usr/share/ruby/openssl/buffering.rb:210:in each’
/usr/share/ruby/openssl/buffering.rb:210:in min' /usr/share/ruby/openssl/buffering.rb:210:in gets’
/usr/share/ruby/webrick/httprequest.rb:519:in block in _read_data' /usr/share/ruby/webrick/utils.rb:239:in timeout’
/usr/share/ruby/webrick/httprequest.rb:518:in _read_data' /usr/share/ruby/webrick/httprequest.rb:529:in read_line’
/usr/share/ruby/webrick/httprequest.rb:416:in read_request_line' /usr/share/ruby/webrick/httprequest.rb:200:in parse’
/usr/share/ruby/webrick/https.rb:50:in parse' /usr/share/ruby/webrick/httpserver.rb:81:in run’
/usr/share/ruby/webrick/server.rb:295:in block in start_thread' /usr/share/gems/gems/logging-2.2.2/lib/logging/diagnostic_context.rb:474:in call’
/usr/share/gems/gems/logging-2.2.2/lib/logging/diagnostic_context.rb:474:in block in create_with_logging_context' 2019-08-09T04:39:27 [D] close: ::ffff:10.114.167.5:39660 2019-08-09T04:39:27 [D] accept: ::ffff:10.114.167.5:39662 2019-08-09T04:39:32 [E] <ArgumentError> comparison of Fixnum with nil failed /usr/share/ruby/openssl/buffering.rb:210:in each’
/usr/share/ruby/openssl/buffering.rb:210:in min' /usr/share/ruby/openssl/buffering.rb:210:in gets’
/usr/share/ruby/webrick/httprequest.rb:519:in block in _read_data' /usr/share/ruby/webrick/utils.rb:239:in timeout’
/usr/share/ruby/webrick/httprequest.rb:518:in _read_data' /usr/share/ruby/webrick/httprequest.rb:529:in read_line’
/usr/share/ruby/webrick/httprequest.rb:416:in read_request_line' /usr/share/ruby/webrick/httprequest.rb:200:in parse’
/usr/share/ruby/webrick/https.rb:50:in parse' /usr/share/ruby/webrick/httpserver.rb:81:in run’
/usr/share/ruby/webrick/server.rb:295:in block in start_thread' /usr/share/gems/gems/logging-2.2.2/lib/logging/diagnostic_context.rb:474:in call’
/usr/share/gems/gems/logging-2.2.2/lib/logging/diagnostic_context.rb:474:in `block in create_with_logging_context’
2019-08-09T04:39:32 [D] close: ::ffff:10.114.167.5:39662

Is there any other information that I can give to help better understand this problem ?

ekohl · August 9, 2019, 8:53am

It looks like some process is scanning your smart-proxy. Foreman doesn’t use OPTIONS and it’s also sending other garbage. Is there some internal security scanner that tries to find weaknesses?

Daniel-Vaz · August 9, 2019, 1:16pm

Thanks for Feedback.

This cluster is inside a huge organization, is very likely that that is the case but I will never have 100% guarantee.

I just wanted to see if someone new if this was a fixable problem or not a problem at all.

Is there anything I can do to make foreman ignore those errors and\or not showing them ?

ekohl · August 9, 2019, 1:37pm

Given that line you can firewall 10.144.167.5. I’m very certain this is something that tries to scan it for weaknesses. That can be a legitimate instance (many large orgs have such a thing) or an actual intruder. I’d contact your internal networking and/or security teams on how to proceed.