On Mon, Sep 14, 2015 at 8:27 PM, Koen Vanoppen <vanoppen.koen@gmail.com> wrote:

Yes,

That will indeed be the issue I think. But... Can you explain to me what steps I need to take? I rather not change my certs...

 

The issue is that the setup is going to extract the cert to verify its compatibility with latest browser but to do that it assumes that it was created with our internal CA with the default password.
So it fails if the user substituted the apache cert with a certificate signed by a different CA and protected with a different password.

We'll fix it for the next release but I can suggest you a workaround:
- Backup the current /etc/pki/ovirt-engine/keys/apache.p12
- Recreate the apache.p12 with the password 'mypass':
  openssl pkcs12 -export -out /etc/pki/ovirt-engine/keys/apache.p12 -inkey /etc/pki/ovirt-engine/keys/apache.key.nopass -in /etc/pki/ovirt-engine/certs/apache.cer
When prompted for password use 'mypass' without the quotation marks
- execute engine-setup to upgrade
- if you prefer, restore your original /etc/pki/ovirt-engine/keys/apache.p12 and restart the Apache server.

 

Kind regards and thanks for your help,

Koen

On 11 September 2015 at 19:25, Yaniv Kaul <ykaul@redhat.com> wrote:

On 11/09/15 19:18, Koen Vanoppen wrote:

Hi everybody,

I'm trying to upgrade ovirt to the ovirt 3.5.4 from my current version 3.5.3.

But when I try to run engine-setup I got this:

[ INFO  ] Checking for product updates...
          Setup has found updates for some packages, do you wish to update them now? (Yes, No) [Yes]:
[ INFO  ] Checking for an update for Setup...
        
          --== ALL IN ONE CONFIGURATION ==--
        
        
          --== NETWORK CONFIGURATION ==--
        
          Setup can automatically configure the firewall on this system.
          Note: automatic configuration of the firewall may overwrite current settings.
          Do you want Setup to configure the firewall? (Yes, No) [Yes]:
[ INFO  ] firewalld will be configured as firewall manager.
        
          --== DATABASE CONFIGURATION ==--
        
          The detected DWH database size is 198 MB.
          Setup can backup the existing database. The time and space required for the database backup depend on its size. This process takes time, and in some cases (for instance, when the size is few GBs) may take several hours to complete.
          If you choose to not back up the database, and Setup later fails for some reason, it will not be able to restore the database and all DWH data will be lost.
          Would you like to backup the existing database before upgrading it? (Yes, No) [Yes]:
        
          --== OVIRT ENGINE CONFIGURATION ==--
        
          Skipping storing options as database already prepared
        
          --== PKI CONFIGURATION ==--
        
[ ERROR ] Failed to execute stage 'Environment customization': Command '/bin/openssl' failed to execute
[ INFO  ] Stage: Clean up
          Log file is located at /var/log/ovirt-engine/setup/ovirt-engine-setup-20150911181604-1gft67.log
[ INFO  ] Generating answer file '/var/lib/ovirt-engine/setup/answers/20150911181626-setup.conf'
[ INFO  ] Stage: Pre-termination
[ INFO  ] Stage: Termination
[ ERROR ] Execution of setup failed

Any idea?

Looks like https://bugzilla.redhat.com/show_bug.cgi?id=1260752 .
Y.

Kind regards,

Koen

_______________________________________________
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users

_______________________________________________
Users mailing list
Users@ovirt.org
http://lists.ovirt.org/mailman/listinfo/users