Grafana VM fails with "unsafe legacy renegotiation disabled" after upgrading to Jammy Stemcells
Article ID: 293748
Updated On:
Products
Operations Manager
Issue/Introduction
When upgrading Healthwatch to use Jammy Stemcells, the Apply Changes fails with:
Looking at the log file grafana.stderr.log shows:
Note: This issue may be also observed on other tiles/errands that use curl during the process.
Error: 'grafana/xxx (0)' is not running after update. Review logs for failed jobs: grafana
Looking at the log file grafana.stderr.log shows:
curl: (35) error:0A000152:SSL routines::unsafe legacy renegotiation disabled
Note: This issue may be also observed on other tiles/errands that use curl during the process.
Environment
Product Version: 2.10
Resolution
The error is caused due to your LoadBalancer not allowing any renegotiation and OpenSSL v3 requiring secure renegotiation (Jammy Stemcells use OpenSSL 3.0.)
You'll need to check with your Load Balancer team to have them enable renegotiation on the load balancers. The errand should then succeed.
You'll need to check with your Load Balancer team to have them enable renegotiation on the load balancers. The errand should then succeed.
Feedback
Yes
No
Powered by
