<div dir="ltr"><br><div class="gmail_extra"><br><div class="gmail_quote">On Mon, Sep 14, 2015 at 8:27 PM, Koen Vanoppen <span dir="ltr"><<a href="mailto:vanoppen.koen@gmail.com" target="_blank">vanoppen.koen@gmail.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex"><div dir="ltr">Yes,<div>That will indeed be the issue I think. But... Can you explain to me what steps I need to take? I rather not change my certs...</div></div></blockquote><div> </div>The issue is that the setup is going to extract the cert to verify its compatibility with latest browser but to do that it assumes that it was created with our internal CA with the default password.<br>So it fails if the user substituted the apache cert with a certificate signed by a different CA and protected with a different password.<br><br>We'll fix it for the next release but I can suggest you a workaround:<br>- Backup the current /etc/pki/ovirt-engine/keys/apache.p12<br>- Recreate the apache.p12 with the password 'mypass':<br> openssl pkcs12 -export -out /etc/pki/ovirt-engine/keys/apache.p12 -inkey /etc/pki/ovirt-engine/keys/apache.key.nopass -in /etc/pki/ovirt-engine/certs/apache.cer<br>When prompted for password use 'mypass' without the quotation marks<br>- execute engine-setup to upgrade<br>- if you prefer, restore your original /etc/pki/ovirt-engine/keys/apache.p12 and restart the Apache server.</div><div class="gmail_quote"><div> <br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex"><div dir="ltr"><div></div><div>Kind regards and thanks for your help,</div><div><br></div><div>Koen</div></div><div class=""><div class="h5"><div class="gmail_extra"><br><div class="gmail_quote">On 11 September 2015 at 19:25, Yaniv Kaul <span dir="ltr"><<a href="mailto:ykaul@redhat.com" target="_blank">ykaul@redhat.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex">
<div text="#000000" bgcolor="#FFFFFF"><div><div>
<div>On 11/09/15 19:18, Koen Vanoppen wrote:<br>
</div>
<blockquote type="cite">
<div dir="ltr">
<div>Hi everybody,<br>
<br>
</div>
<div>I'm trying to upgrade ovirt to the ovirt 3.5.4 from my
current version 3.5.3.<br>
</div>
<div>But when I try to run engine-setup I got this:<br>
<br>
[ INFO ] Checking for product updates...<br>
Setup has found updates for some packages, do you
wish to update them now? (Yes, No) [Yes]: <br>
[ INFO ] Checking for an update for Setup...<br>
<br>
--== ALL IN ONE CONFIGURATION ==--<br>
<br>
<br>
--== NETWORK CONFIGURATION ==--<br>
<br>
Setup can automatically configure the firewall on
this system.<br>
Note: automatic configuration of the firewall may
overwrite current settings.<br>
Do you want Setup to configure the firewall? (Yes,
No) [Yes]: <br>
[ INFO ] firewalld will be configured as firewall manager.<br>
<br>
--== DATABASE CONFIGURATION ==--<br>
<br>
The detected DWH database size is 198 MB.<br>
Setup can backup the existing database. The time and
space required for the database backup depend on its size.
This process takes time, and in some cases (for instance, when
the size is few GBs) may take several hours to complete.<br>
If you choose to not back up the database, and Setup
later fails for some reason, it will not be able to restore
the database and all DWH data will be lost.<br>
Would you like to backup the existing database
before upgrading it? (Yes, No) [Yes]: <br>
<br>
--== OVIRT ENGINE CONFIGURATION ==--<br>
<br>
Skipping storing options as database already
prepared<br>
<br>
--== PKI CONFIGURATION ==--<br>
<br>
[ ERROR ] Failed to execute stage 'Environment customization':
Command '/bin/openssl' failed to execute<br>
[ INFO ] Stage: Clean up<br>
Log file is located at
/var/log/ovirt-engine/setup/ovirt-engine-setup-20150911181604-1gft67.log<br>
[ INFO ] Generating answer file
'/var/lib/ovirt-engine/setup/answers/20150911181626-setup.conf'<br>
[ INFO ] Stage: Pre-termination<br>
[ INFO ] Stage: Termination<br>
[ ERROR ] Execution of setup failed<br>
<br>
<br>
</div>
<div>Any idea?<br>
</div>
</div>
</blockquote>
<br></div></div>
Looks like <a href="https://bugzilla.redhat.com/show_bug.cgi?id=1260752" target="_blank">https://bugzilla.redhat.com/show_bug.cgi?id=1260752</a> .<br>
Y.<br>
<br>
<blockquote type="cite">
<div dir="ltr">
<div><br>
</div>
<div>Kind regards,<br>
<br>
</div>
<div>Koen<br>
</div>
</div>
<br>
<fieldset></fieldset>
<br>
<pre>_______________________________________________
Users mailing list
<a href="mailto:Users@ovirt.org" target="_blank">Users@ovirt.org</a>
<a href="http://lists.ovirt.org/mailman/listinfo/users" target="_blank">http://lists.ovirt.org/mailman/listinfo/users</a>
</pre>
</blockquote>
<br>
</div>
</blockquote></div><br></div>
</div></div><br>_______________________________________________<br>
Users mailing list<br>
<a href="mailto:Users@ovirt.org">Users@ovirt.org</a><br>
<a href="http://lists.ovirt.org/mailman/listinfo/users" rel="noreferrer" target="_blank">http://lists.ovirt.org/mailman/listinfo/users</a><br>
<br></blockquote></div><br></div></div>