5:44 p.m.
Hello George,
Probably your engine and provider certs do not match.
The engine pki should be in:
/etc/pki/ovirt-engine/certs/
The provider keys are defined in the SSL section of the config file
(/etc/ovirt-provider-ovn/conf.d/...):
[SSL]
https-enabled=true
ssl-key-file=...
ssl-cert-file=...
ssl-cacert-file=...
You can compare the keys/certs using openssl.
Was the provider created using egine-setup?
For testing purposes you can change the "https-enabled" to false and try
connecting using http.
Thanks,
Marcin
On Thu, Feb 8, 2018 at 12:58 PM, Ilya Fedotov <kosha79(a)gmail.com> wrote:
Hello, Georgy
Maybe, the problem have the different domain name and name your node
name(local domain), and certificate note valid.
with br, Ilya
2018-02-05 22:36 GMT+03:00 George Sitov <usual.man(a)gmail.com>:
> Hello!
>
> I have a problem wiith configure external provider.
>
> Edit config file - ovirt-provider-ovn.conf, set ssl parameters.
> systemctl start ovirt-provider-ovn start without problem.
> In external proveder in web gui i set:
> Provider URL: https://ovirt.mydomain.com:9696
> Username: admin@internal
> Authentication URL: https://ovirt.mydomain.com:35357/v2.0/
> But after i press test button i see error - Failed to communicate with
> the external provider, see log for additional details.
>
> /var/log/ovirt-engine/engine.log:
> 2018-02-05 21:33:55,517+02 ERROR [org.ovirt.engine.core.bll.pro
> vider.network.openstack.BaseNetworkProviderProxy] (default task-29)
> [69fa312e-6e2e-4925-b081-385beba18a6a] Bad Gateway (OpenStack response
> error code: 502)
> 2018-02-05 21:33:55,517+02 ERROR [org.ovirt.engine.core.bll.pro
> vider.TestProviderConnectivityCommand] (default task-29)
> [69fa312e-6e2e-4925-b081-385beba18a6a] Command '
> org.ovirt.engine.core.bll.provider.TestProviderConnectivityCommand'
> failed: EngineException: (Failed with error PROVIDER_FAILURE and code 5050)
>
> In /var/log/ovirt-provider-ovn.log:
>
> 2018-02-05 21:33:55,510 Starting new HTTPS connection (1):
> ovirt.astrecdata.com
> 2018-02-05 21:33:55,516 [SSL: CERTIFICATE_VERIFY_FAILED] certificate
> verify failed (_ssl.c:579)
> Traceback (most recent call last):
> File "/usr/share/ovirt-provider-ovn/handlers/base_handler.py", line
> 126, in _handle_request
> method, path_parts, content)
> File "/usr/share/ovirt-provider-ovn/handlers/selecting_handler.py",
> line 176, in handle_request
> return self.call_response_handler(handler, content, parameters)
> File "/usr/share/ovirt-provider-ovn/handlers/keystone.py", line 33, in
> call_response_handler
> return response_handler(content, parameters)
> File "/usr/share/ovirt-provider-ovn/handlers/keystone_responses.py",
> line 60, in post_tokens
> user_password=user_password)
> File "/usr/share/ovirt-provider-ovn/auth/plugin_facade.py", line 26,
> in create_token
> return auth.core.plugin.create_token(user_at_domain, user_password)
> File "/usr/share/ovirt-provider-ovn/auth/plugins/ovirt/plugin.py",
> line 48, in create_token
> timeout=self._timeout())
> File "/usr/share/ovirt-provider-ovn/auth/plugins/ovirt/sso.py", line
> 62, in create_token
> username, password, engine_url, ca_file, timeout)
> File "/usr/share/ovirt-provider-ovn/auth/plugins/ovirt/sso.py", line
> 53, in wrapper
> response = func(*args, **kwargs)
> File "/usr/share/ovirt-provider-ovn/auth/plugins/ovirt/sso.py", line
> 46, in wrapper
> raise BadGateway(e)
> BadGateway: [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed
> (_ssl.c:579)
>
> Whan i do wrong ?
> Please help.
>
> ----
> With best regards Georgii.
>
> _______________________________________________
> Users mailing list
> Users(a)ovirt.org
> http://lists.ovirt.org/mailman/listinfo/users
>
>
_______________________________________________
Users mailing list
Users(a)ovirt.org
http://lists.ovirt.org/mailman/listinfo/users