Hi Vojtech,

could you please provide
- on host:
cat /etc/pki/vdsm/certs/cacert.pem
- on engine: 
rpm -qa "*ansible-runner*"
cat /etc/ansible-runner-service/config.yaml

My guess is that in the ovirt-release44-pre is missing this patch [1] 
but you have the newest ansible-runner.

[1] https://gerrit.ovirt.org/#/c/108532/ 

Martin Necas

On Tue, May 19, 2020 at 12:53 AM Vojtech Juranek <vjuranek@redhat.com> wrote:
Hi,
I'm getting following SSL error when adding new host:

engine:

[...]
2020-05-18 18:28:35,530-04 WARN  [org.ovirt.vdsm.jsonrpc.client.utils.retry.Retryable] (EE-ManagedThreadFactory-engine-Thread-42) [762c711c] Retry failed
2020-05-18 18:28:39,033-04 WARN  [org.ovirt.vdsm.jsonrpc.client.utils.retry.Retryable] (EE-ManagedThreadFactory-engine-Thread-43) [762c711c] Retry failed
2020-05-18 18:28:39,033-04 ERROR [org.ovirt.engine.core.bll.hostdeploy.InstallVdsInternalCommand] (EE-ManagedThreadFactory-engine-Thread-3) [762c711c] Host installation failed for host 'ab082e77-315c-4cfe-8188-11fbee94c2b8', 'fc30-glance': Network error during communication with the host

host (vdsm log):

2020-05-18 18:26:36,963-0400 ERROR (Reactor thread) [vds.dispatcher] uncaptured python exception, closing channel <yajsonrpc.betterAsyncore.Dispatcher connected ('::ffff:192.168.122.246', 52428, 0, 0) at 0x7f9f8c7e8d30> (<class 'ssl.SSLError'>:[X509] no certificate or crl found (_ssl.c:4053) [/usr/lib64/python3.7/asyncore.py|readwrite|110] [/usr/lib64/python3.7/asyncore.py|handle_write_event|441] [/usr/lib/python3.7/site-packages/yajsonrpc/betterAsyncore.py|handle_write|75] [/usr/lib/python3.7/site-packages/yajsonrpc/betterAsyncore.py|_delegate_call|173] [/usr/lib/python3.7/site-packages/vdsm/sslutils.py|handle_write|190] [/usr/lib/python3.7/site-packages/vdsm/sslutils.py|_handle_io|194] [/usr/lib/python3.7/site-packages/vdsm/sslutils.py|_set_up_socket|154]) (betterAsyncore:184)

Any idea what's wrong and/or how to fix it?

Both engine and host are on FC30, host is installed from standard ovirt-release44-pre
repo and engine is dev build of latest engine master with glance API v2 patches [1].

Thanks
Vojta

[1] https://gerrit.ovirt.org/#/q/topic:"Image+Service+API+v2"_______________________________________________
Devel mailing list -- devel@ovirt.org
To unsubscribe send an email to devel-leave@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: https://www.ovirt.org/community/about/community-guidelines/
List Archives: https://lists.ovirt.org/archives/list/devel@ovirt.org/message/VSM7HZN5EB27ADN6NJFQMN32Y42ZJESO/