SAP HANA Multi host install fails with the message "LIBSSH2_ERROR_KEY_EXCHANGE_FAILURE , unable to exchange encryption keys"

Solution Verified - Updated -

Environment

  • Red Hat Enterprise Linux 6 update 5
  • SAP HANA
  • libssh2-1.4.2-1.el6_6.1.x86_64
  • SAP HANA Multi-Install option selected while installing using hdblcmgui utility

Issue

  • SAP HANA Multi host install fails with the message "LIBSSH2_ERROR_KEY_EXCHANGE_FAILURE , unable to exchange encryption keys"

Resolution

The recommended way to install a Scale Out landscape is to use saphostagent as communication method.

Please refer to the SAP HANA Installation and Upgrade guide to set up saphostagent (with SSL encryption).

Root Cause

Components of the HANA installer are linked vs openssl-0.9.8 while liblibssh2 is linked against libcrypto.so.10 (openssl-1.0.1).
Using ssh as communication method leads to both libcrypto.so.6 and libcrypto.so.10 being loaded in the same namespace - as the two libraries are incompatible with each other the installer will fail exchanging the keys.

This solution is part of Red Hat’s fast-track publication program, providing a huge library of solutions that Red Hat engineers have created while supporting our customers. To give you the knowledge you need the instant it becomes available, these articles may be presented in a raw and unedited form.

1 Comments

Per https://launchpad.support.sap.com/#/notes/2247020 this versionlock is required as follows: "Affected are SAP HANA SP10, SAP HANA SP11 until revision 112.04 and SAP HANA SP12 until revision 120".

If deploying 1610, for example, this requirement is lifted.