I have a small home oVirt 4.5 deployment that was struggling a bit and I think I've
only made things worse. I was seeing some SSL errors in various places but couldn't
find any evidence of an expired cert though maybe I overlooked something. At present, it
looks like the most immediate problem is that the engine.log is showing
SyncNetworkProviderCommand fails saying EngineException: (Failed with error Unsupported or
unrecognized SSL message and code 5050). For now, I'm only concerning myself to one
Host that had been running VMs until I tried restarting everything from a power off. I
take it that the sync failure prevents this Host from becoming active.
I had successfully been using this setup for many years. I do have my own web cert on the
engine signed by my CA. While I was getting this same "code 5050" error before
with things like ovirt-imageio (what prompted my initial digging), now I'm afraid
I've only made things more complex. See, I was running FreeIPA on a pair of VMs. In
the past, this pair of VMs would auto-start once the oVirt Engine and Hosts were going and
I had no issue. But now I wonder to what extent OSCP being unreachable might affect the
SSL errors.
What's the best/easiest/safest way out of this mess? Should I just wipe ovirt-engine
of all the non-rpm provided files in /etc/pki/ovirt-engine/ and redo the engine-setup?
I'm afraid of making things worse before I begin attempting that.