2017-09-21 15:26 GMT+02:00 Neil <nwilson123@gmail.com>:
Hi guys,

Please could someone assist, my cluster is down and I can't access my vm's to switch some of them back on.

I'm seeing the following error in the engine.log however I've checked my certs on my hosts (as some of the goolge results said to check), but the certs haven't expired...


2017-09-21 15:09:45,077 ERROR [org.ovirt.engine.core.vdsbroker.vdsbroker.GetCapabilitiesVDSCommand] (DefaultQuartzScheduler_Worker-4) Command GetCapabilitiesVDSCommand(HostName = node02.mydomain.za, HostId = d2debdfe-76e7-40cf-a7fd-78a0f50f14d4, vds=Host[node02.mydomain.za]) execution failed. Exception: VDSNetworkException: javax.net.ssl.SSLHandshakeException: Received fatal alert: certificate_expired
2017-09-21 15:09:45,086 ERROR [org.ovirt.engine.core.vdsbroker.vdsbroker.GetCapabilitiesVDSCommand] (DefaultQuartzScheduler_Worker-10) Command GetCapabilitiesVDSCommand(HostName = node01.mydomain.za, HostId = b108549c-1700-11e2-b936-9f5243b8ce13, vds=Host[node01.mydomain.za]) execution failed. Exception: VDSNetworkException: javax.net.ssl.SSLHandshakeException: Received fatal alert: certificate_expired
2017-09-21 15:09:48,173 ERROR 

My engine and host info is below...

[root@engine01 ovirt-engine]# rpm -qa | grep -i ovirt
ovirt-engine-lib-3.4.0-1.el6.noarch
ovirt-engine-restapi-3.4.0-1.el6.noarch
ovirt-engine-setup-plugin-ovirt-engine-3.4.0-1.el6.noarch
ovirt-engine-3.4.0-1.el6.noarch

People already answered about the certificate expiration.
Please note ovirt-engine-3.4.0 is the first release in the 3.4 series which received 4 updates in its lifecycle (latest is 3.4.4, https://www.ovirt.org/develop/release-management/releases/3.4.4/ )

Please consider updating to a supported version as soon as possible.




 
ovirt-engine-setup-plugin-websocket-proxy-3.4.0-1.el6.noarch
ovirt-host-deploy-java-1.2.0-1.el6.noarch
ovirt-engine-setup-3.4.0-1.el6.noarch
ovirt-host-deploy-1.2.0-1.el6.noarch
ovirt-engine-backend-3.4.0-1.el6.noarch
ovirt-image-uploader-3.4.0-1.el6.noarch
ovirt-engine-tools-3.4.0-1.el6.noarch
ovirt-engine-sdk-python-3.4.0.7-1.el6.noarch
ovirt-engine-webadmin-portal-3.4.0-1.el6.noarch
ovirt-engine-cli-3.4.0.5-1.el6.noarch
ovirt-engine-setup-base-3.4.0-1.el6.noarch
ovirt-iso-uploader-3.4.0-1.el6.noarch
ovirt-engine-userportal-3.4.0-1.el6.noarch
ovirt-log-collector-3.4.1-1.el6.noarch
ovirt-engine-websocket-proxy-3.4.0-1.el6.noarch
ovirt-engine-setup-plugin-ovirt-engine-common-3.4.0-1.el6.noarch
ovirt-engine-dbscripts-3.4.0-1.el6.noarch
[root@engine01 ovirt-engine]# cat /etc/redhat-release 
CentOS release 6.5 (Final)


[root@node02 ~]# openssl x509 -in /etc/pki/vdsm/certs/vdsmcert.pem -enddate -noout ; date
notAfter=May 27 08:36:17 2019 GMT
Thu Sep 21 15:18:22 SAST 2017
CentOS release 6.5 (Final)
[root@node02 ~]# rpm -qa | grep vdsm
vdsm-4.14.6-0.el6.x86_64
vdsm-python-4.14.6-0.el6.x86_64
vdsm-cli-4.14.6-0.el6.noarch
vdsm-xmlrpc-4.14.6-0.el6.noarch
vdsm-python-zombiereaper-4.14.6-0.el6.noarch


[root@node01 ~]# openssl x509 -in /etc/pki/vdsm/certs/vdsmcert.pem -enddate -noout ; date
notAfter=Jun 13 16:09:41 2018 GMT
Thu Sep 21 15:18:52 SAST 2017
CentOS release 6.5 (Final)
[root@node01 ~]# rpm -qa | grep -i vdsm
vdsm-4.14.6-0.el6.x86_64
vdsm-xmlrpc-4.14.6-0.el6.noarch
vdsm-cli-4.14.6-0.el6.noarch
vdsm-python-zombiereaper-4.14.6-0.el6.noarch
vdsm-python-4.14.6-0.el6.x86_64

Please could I have some assistance, I'm rater desperate.

Thank you.

Regards.

Neil Wilson



_______________________________________________
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users




--

SANDRO BONAZZOLA

ASSOCIATE MANAGER, SOFTWARE ENGINEERING, EMEA ENG VIRTUALIZATION R&D

Red Hat EMEA