<div dir="ltr"><div class="gmail_default" style="font-family:tahoma,sans-serif">Reverting back to the original cert would take me past that error but would just continue to spam the message until timeout</div><div class="gmail_default">
<div class="gmail_default"><font face="tahoma, sans-serif">[ INFO ] Still waiting for VDSM host to become operational...</font></div><div class="gmail_default"><font face="tahoma, sans-serif">[ INFO ] Still waiting for VDSM host to become operational...</font></div>
<div style="font-family:tahoma,sans-serif"><br></div></div><div class="gmail_default" style="font-family:tahoma,sans-serif"><br></div><div class="gmail_default" style="font-family:tahoma,sans-serif">Logs seem to just repeat</div>
<div class="gmail_default"><div class="gmail_default"><font face="tahoma, sans-serif">2014-01-29 17:44:53 DEBUG otopi.plugins.ovirt_hosted_engine_setup.engine.add_host add_host._wait_host_ready:229 VDSM host in state</font></div>
<div class="gmail_default"><font face="tahoma, sans-serif">2014-01-29 17:44:54 DEBUG otopi.plugins.ovirt_hosted_engine_setup.engine.add_host add_host._wait_host_ready:213 Error fetching host state: 'NoneType' object has no attribute 'status'</font></div>
<div class="gmail_default"><font face="tahoma, sans-serif">2014-01-29 17:44:54 DEBUG otopi.plugins.ovirt_hosted_engine_setup.engine.add_host add_host._wait_host_ready:229 VDSM host in state</font></div><div class="gmail_default">
<font face="tahoma, sans-serif">2014-01-29 17:44:55 DEBUG otopi.plugins.ovirt_hosted_engine_setup.engine.add_host add_host._wait_host_ready:213 Error fetching host state: 'NoneType' object has no attribute 'status'</font></div>
<div class="gmail_default"><font face="tahoma, sans-serif">2014-01-29 17:44:55 DEBUG otopi.plugins.ovirt_hosted_engine_setup.engine.add_host add_host._wait_host_ready:229 VDSM host in state</font></div><div class="gmail_default">
<font face="tahoma, sans-serif">2014-01-29 17:44:56 DEBUG otopi.plugins.ovirt_hosted_engine_setup.engine.add_host add_host._wait_host_ready:213 Error fetching host state: 'NoneType' object has no attribute 'status'</font></div>
<div class="gmail_default"><font face="tahoma, sans-serif">2014-01-29 17:44:56 DEBUG otopi.plugins.ovirt_hosted_engine_setup.engine.add_host add_host._wait_host_ready:229 VDSM host in state</font></div><div style="font-family:tahoma,sans-serif">
<br></div></div><div class="gmail_extra"><br><div class="gmail_quote">On Wed, Jan 29, 2014 at 5:38 PM, Andrew Lau <span dir="ltr"><<a href="mailto:andrew@andrewklau.com" target="_blank">andrew@andrewklau.com</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex"><div dir="ltr"><div style="font-family:tahoma,sans-serif">
Hi,</div><div style="font-family:tahoma,sans-serif"><br></div><div style="font-family:tahoma,sans-serif">
After running through the new patch posted in BZ 1055153 I'm adding a second host to the hosted-engine cluster but it seems to fail right before the finish:</div><div style="font-family:tahoma,sans-serif">
<br></div><div><div><font face="tahoma, sans-serif">[ ERROR ] Failed to execute stage 'Closing up': [ERROR]::oVirt API connection failure, [Errno 1] _ssl.c:492: error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed</font></div>
<div style="font-family:tahoma,sans-serif"><br></div><div style="font-family:tahoma,sans-serif">Couple Extra Notes:</div><div style="font-family:tahoma,sans-serif">Engine has a custom SSL cert but the CA has been trusted by the new host. When I temporarily return the engine's SSL back to the default generated one the install will succeed.</div>
<div style="font-family:tahoma,sans-serif"><br></div><div style="font-family:tahoma,sans-serif">Setup logs: <a href="http://www.fpaste.org/72624/13909770/" target="_blank">http://www.fpaste.org/72624/13909770/</a><br></div>
<div style="font-family:tahoma,sans-serif">
<br></div><div style="font-family:tahoma,sans-serif">What confuses me is:</div><div style="font-family:tahoma,sans-serif"><br></div><div style="font-family:tahoma,sans-serif">curl <a href="https://engine.example.net" target="_blank">https://engine.example.net</a> with the custom SSL cert will succeed but with the original self-signed gives the expected "insecure" message. What criteria need to be met so the install will pass?</div>
<div style="font-family:tahoma,sans-serif"><br></div></div><div><font face="tahoma, sans-serif">Thanks,<br>Andrew</font><br></div>
</div>
</blockquote></div><br></div></div>