<div dir="ltr"><div class="gmail_default" style="font-family:arial,helvetica,sans-serif"><br></div><div class="gmail_extra"><br><div class="gmail_quote">On Tue, Jul 26, 2016 at 5:39 PM, Jiri Belka <span dir="ltr"><<a href="mailto:jbelka@redhat.com" target="_blank">jbelka@redhat.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">> Hi,<br>
><br>
> Unfortunately, upgrading to 4.0.1RC didn't solve the problem. Actually,<br>
> the error changed to 'General SSLEngine problem', but the result was the<br>
> same, like this:<br>
><br>
> 2016-07-13 09:52:22,010 INFO<br>
> [org.ovirt.vdsm.jsonrpc.client.reactors.ReactorClient] (SSL Stomp<br>
> Reactor) [] Connecting to /10.X.X.X<br>
> 2016-07-13 09:52:22,018 ERROR<br>
> [org.ovirt.vdsm.jsonrpc.client.reactors.Reactor] (SSL Stomp Reactor) []<br>
> Unable to process messages: General SSLEngine problem<br>
><br>
> It's worth mentioning that we're using our own SSL certificates (not<br>
> self-signed), and I imported the combined certificate into the<br>
> /etc/pki/ovirt-engine/.truststore key file. Not sure if related, but<br>
> just in case.<br>
><br>
> I had to downgrade to 3.6.7. I'm attaching requested logs, if you need<br>
> anything else don't hesitate to ask.<br>
<br>
<br>
FYI I migrated my 3.6 env (engine + 1 host) to 4.0 and the host is up<br>
and running fine on datacenter/cluster 4.0 compat level.<br>
<br>
FYA there's a BZ about engine certs <a href="https://bugzilla.redhat.com/show_bug.cgi?id=1336838" rel="noreferrer" target="_blank">https://bugzilla.redhat.com/show_bug.cgi?id=1336838</a></blockquote><div><br><div class="gmail_default" style="font-family:arial,helvetica,sans-serif;display:inline">We should mention</div><div class="gmail_default" style="font-family:arial,helvetica,sans-serif;display:inline"> that above bug described how to use custom HTTPS certificate signed by custom CA. But even if this is configured, all communication between engine and host will still use certificate signed by internal oVirt CA.<br><br></div></div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><br>
<span class="HOEnZb"><font color="#888888"><br>
j.<br>
</font></span></blockquote></div><br></div></div>