[ovirt-users] Failed to start service 'ovirt-imageio-proxy' after engine-setup

24 Aug 2016

      This is a multi-part message in MIME format.
--------------6EC20558103C8504E6011515
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable

Hello List,

After upgrading ovirt-hosted-engine setup failed with "Failed to start
service 'ovirt-imageio-proxy'".

If try to start it manually via

journalctl -xe shows following error:
Aug 24 20:51:10 engine.mydomain.local ovirt-imageio-proxy[7635]:
self._secure_server(config, server)
Aug 24 20:51:10 engine.mydomain.local ovirt-imageio-proxy[7635]: File
"/usr/lib/python2.7/site-packages/ovirt_imageio_proxy/server.py", line
Aug 24 20:51:10 engine.mydomain.local ovirt-imageio-proxy[7635]:
server_side=3DTrue)
Aug 24 20:51:10 engine.mydomain.local ovirt-imageio-proxy[7635]: File
"/usr/lib64/python2.7/ssl.py", line 913, in wrap_socket
Aug 24 20:51:10 engine.mydomain.local ovirt-imageio-proxy[7635]:
ciphers=3Dciphers)
Aug 24 20:51:10 engine.mydomain.local ovirt-imageio-proxy[7635]: File
"/usr/lib64/python2.7/ssl.py", line 526, in __init__
Aug 24 20:51:10 engine.mydomain.local ovirt-imageio-proxy[7635]:
self._context.load_cert_chain(certfile, keyfile)
Aug 24 20:51:10 engine.mydomain.local ovirt-imageio-proxy[7635]:
IOError: [Errno 2] No such file or directory
Aug 24 20:51:10 engine.mydomain.local systemd[1]:
ovirt-imageio-proxy.service: main process exited, code=3Dexited,
status=3D1/FAILURE
Aug 24 20:51:10 engine.mydomain.local systemd[1]: Failed to start oVirt
ImageIO Proxy.

Config (/etc/ovirt-imageio-proxy/ovirt-imageio-proxy.conf) points to a
non-existing cert
/etc/pki/ovirt-engine/certs/imageio-proxy.cer
and nonexisting key:
/etc/pki/ovirt-engine/keys/imageio-proxy.key.nopass

How to generate a correct cert and key for correct startup ?

Bye
--=20

*Ralf Schenk*
fon +49 (0) 24 05 / 40 83 70
fax +49 (0) 24 05 / 40 83 759
mail *rs@databay.de* <mailto:rs@databay.de>
	  =09
*Databay AG*
Jens-Otto-Krag-Stra=C3=9Fe 11
D-52146 W=C3=BCrselen
*www.databay.de* <http://www.databay.de>

Sitz/Amtsgericht Aachen =E2=80=A2 HRB:8437 =E2=80=A2 USt-IdNr.: DE 210844=
202
Vorstand: Ralf Schenk, Dipl.-Ing. Jens Conze, Aresch Yavari, Dipl.-Kfm.
Philipp Hermanns
Aufsichtsratsvorsitzender: Klaus Scholzen (RA)

------------------------------------------------------------------------

--------------6EC20558103C8504E6011515
Content-Type: multipart/related;
 boundary="------------4B71579EB2ECC3FCA4852F71"

--------------4B71579EB2ECC3FCA4852F71
Content-Type: text/html; charset=utf-8
Content-Transfer-Encoding: 8bit

<html>
  <head>

    <meta http-equiv="content-type" content="text/html; charset=utf-8">
  </head>
  <body bgcolor="#FFFFFF" text="#000000">
    <p>Hello List,<br>
    </p>
    <p>After upgrading ovirt-hosted-engine setup failed with "Failed to
      start service 'ovirt-imageio-proxy'".</p>
    <p>If try to start it manually via <br>
    </p>
    journalctl -xe shows following error:<br>
    Aug 24 20:51:10 engine.mydomain.local ovirt-imageio-proxy[7635]:
    self._secure_server(config, server)<br>
    Aug 24 20:51:10 engine.mydomain.local ovirt-imageio-proxy[7635]:
    File
    "/usr/lib/python2.7/site-packages/ovirt_imageio_proxy/server.py",
    line<br>
    Aug 24 20:51:10 engine.mydomain.local ovirt-imageio-proxy[7635]:
    server_side=True)<br>
    Aug 24 20:51:10 engine.mydomain.local ovirt-imageio-proxy[7635]:
    File "/usr/lib64/python2.7/ssl.py", line 913, in wrap_socket<br>
    Aug 24 20:51:10 engine.mydomain.local ovirt-imageio-proxy[7635]:
    ciphers=ciphers)<br>
    Aug 24 20:51:10 engine.mydomain.local ovirt-imageio-proxy[7635]:
    File "/usr/lib64/python2.7/ssl.py", line 526, in __init__<br>
    Aug 24 20:51:10 engine.mydomain.local ovirt-imageio-proxy[7635]:
    self._context.load_cert_chain(certfile, keyfile)<br>
    Aug 24 20:51:10 engine.mydomain.local ovirt-imageio-proxy[7635]:
    IOError: [Errno 2] No such file or directory<br>
    Aug 24 20:51:10 engine.mydomain.local systemd[1]:
    ovirt-imageio-proxy.service: main process exited, code=exited,
    status=1/FAILURE<br>
    Aug 24 20:51:10 engine.mydomain.local systemd[1]: Failed to start
    oVirt ImageIO Proxy.<br>
    <br>
    Config (/etc/ovirt-imageio-proxy/ovirt-imageio-proxy.conf) points to
    a non-existing cert<br>
    /etc/pki/ovirt-engine/certs/imageio-proxy.cer<br>
    and nonexisting key:<br>
    /etc/pki/ovirt-engine/keys/imageio-proxy.key.nopass<br>
    <br>
    How to generate a correct cert and key for correct startup ?<br>
    <br>
    Bye<br>
    <div class="moz-signature">-- <br>
      <p>
      </p>
      <table border="0" cellpadding="0" cellspacing="0">
        <tbody>
          <tr>
            <td colspan="3"><img
                src="cid:part1.15F71E8B.067645E0@databay.de" height="30"
                border="0" width="151"></td>
          </tr>
          <tr>
            <td valign="top"> <font face="Verdana, Arial, sans-serif"
                size="-1"><br>
                <b>Ralf Schenk</b><br>
                fon +49 (0) 24 05 / 40 83 70<br>
                fax +49 (0) 24 05 / 40 83 759<br>
                mail <a href="mailto:rs@databay.de"><font
                    color="#FF0000"><b>rs@databay.de</b></font></a><br>
              </font> </td>
            <td width="30"> </td>
            <td valign="top"> <font face="Verdana, Arial, sans-serif"
                size="-1"><br>
                <b>Databay AG</b><br>
                Jens-Otto-Krag-Straße 11<br>
                D-52146 Würselen<br>
                <a href="http://www.databay.de"><font color="#FF0000"><b>www.databay.de</b></font></a>
              </font> </td>
          </tr>
          <tr>
            <td colspan="3" valign="top"> <font face="Verdana, Arial,
                sans-serif" size="1"><br>
                Sitz/Amtsgericht Aachen • HRB:8437 • USt-IdNr.: DE
                210844202<br>
                Vorstand: Ralf Schenk, Dipl.-Ing. Jens Conze, Aresch
                Yavari, Dipl.-Kfm. Philipp Hermanns<br>
                Aufsichtsratsvorsitzender: Klaus Scholzen (RA) </font>
            </td>
          </tr>
        </tbody>
      </table>
      <hr color="#000000" noshade="noshade" size="1" width="100%">
    </div>
  </body>
</html>

--------------4B71579EB2ECC3FCA4852F71
Content-Type: image/gif;
 name="logo_databay_email.gif"
Content-Transfer-Encoding: base64
Content-ID: <part1.15F71E8B.067645E0@databay.de>
Content-Disposition: inline;
 filename="logo_databay_email.gif"
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--------------4B71579EB2ECC3FCA4852F71--

--------------6EC20558103C8504E6011515--