This is a multi-part message in MIME format.
--------------139A302E9F372A196BAE7FC0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: 8bit
Thank you,
i solved it by copying the websocket-proxy cert/key-pair.
Bye
Am 24.08.2016 um 22:15 schrieb Yedidyah Bar David:
On Wed, Aug 24, 2016 at 9:57 PM, Ralf Schenk <rs(a)databay.de
<mailto:rs@databay.de>> wrote:
Hello List,
After upgrading ovirt-hosted-engine setup failed with "Failed to
start service 'ovirt-imageio-proxy'".
If try to start it manually via
journalctl -xe shows following error:
Aug 24 20:51:10 engine.mydomain.local ovirt-imageio-proxy[7635]:
self._secure_server(config, server)
Aug 24 20:51:10 engine.mydomain.local ovirt-imageio-proxy[7635]:
File
"/usr/lib/python2.7/site-packages/ovirt_imageio_proxy/server.py", line
Aug 24 20:51:10 engine.mydomain.local ovirt-imageio-proxy[7635]:
server_side=True)
Aug 24 20:51:10 engine.mydomain.local ovirt-imageio-proxy[7635]:
File "/usr/lib64/python2.7/ssl.py", line 913, in wrap_socket
Aug 24 20:51:10 engine.mydomain.local ovirt-imageio-proxy[7635]:
ciphers=ciphers)
Aug 24 20:51:10 engine.mydomain.local ovirt-imageio-proxy[7635]:
File "/usr/lib64/python2.7/ssl.py", line 526, in __init__
Aug 24 20:51:10 engine.mydomain.local ovirt-imageio-proxy[7635]:
self._context.load_cert_chain(certfile, keyfile)
Aug 24 20:51:10 engine.mydomain.local ovirt-imageio-proxy[7635]:
IOError: [Errno 2] No such file or directory
Aug 24 20:51:10 engine.mydomain.local systemd[1]:
ovirt-imageio-proxy.service: main process exited, code=exited,
status=1/FAILURE
Aug 24 20:51:10 engine.mydomain.local systemd[1]: Failed to start
oVirt ImageIO Proxy.
Config (/etc/ovirt-imageio-proxy/ovirt-imageio-proxy.conf) points
to a non-existing cert
/etc/pki/ovirt-engine/certs/imageio-proxy.cer
and nonexisting key:
/etc/pki/ovirt-engine/keys/imageio-proxy.key.nopass
Right, will be fixed in 4.0.3:
https://bugzilla.redhat.com/show_bug.cgi?id=1365451
How to generate a correct cert and key for correct startup ?
There is no simple single one-liner to do that for now.
Search for "pki-enroll-pkcs12.sh" for examples if you really want to.
You can copy e.g. websocket-proxy key/cert.
You can use the 4.0 nightly repo - bugs in MODIFIED are already fixed
there:
http://www.ovirt.org/develop/dev-process/install-nightly-snapshot/
You can answer 'no' to 'configure image i/o proxy?', if you don't
need it.
It's only needed for the new image uploader:
http://www.ovirt.org/develop/release-management/features/storage/image-up...
Or you can wait for 4.0.3.
Best,
Bye
--
*Ralf Schenk*
fon +49 (0) 24 05 / 40 83 70
<tel:%2B49%20%280%29%2024%2005%20%2F%2040%2083%2070>
fax +49 (0) 24 05 / 40 83 759
<tel:%2B49%20%280%29%2024%2005%20%2F%2040%2083%20759>
mail *rs(a)databay.de* <mailto:rs@databay.de>
*Databay AG*
Jens-Otto-Krag-Straße 11
D-52146 Würselen
*www.databay.de* <
http://www.databay.de>
Sitz/Amtsgericht Aachen • HRB:8437 • USt-IdNr.: DE 210844202
Vorstand: Ralf Schenk, Dipl.-Ing. Jens Conze, Aresch Yavari,
Dipl.-Kfm. Philipp Hermanns
Aufsichtsratsvorsitzender: Klaus Scholzen (RA)
------------------------------------------------------------------------
_______________________________________________
Users mailing list
Users(a)ovirt.org <mailto:Users@ovirt.org>
http://lists.ovirt.org/mailman/listinfo/users
<
http://lists.ovirt.org/mailman/listinfo/users>
--
Didi
--
*Ralf Schenk*
fon +49 (0) 24 05 / 40 83 70
fax +49 (0) 24 05 / 40 83 759
mail *rs(a)databay.de* <mailto:rs@databay.de>
*Databay AG*
Jens-Otto-Krag-Straße 11
D-52146 Würselen
*www.databay.de* <
http://www.databay.de>
Sitz/Amtsgericht Aachen • HRB:8437 • USt-IdNr.: DE 210844202
Vorstand: Ralf Schenk, Dipl.-Ing. Jens Conze, Aresch Yavari, Dipl.-Kfm.
Philipp Hermanns
Aufsichtsratsvorsitzender: Wilhelm Dohmen
------------------------------------------------------------------------
--------------139A302E9F372A196BAE7FC0
Content-Type: multipart/related;
boundary="------------6E0E059AD361035ABCE04F21"
--------------6E0E059AD361035ABCE04F21
Content-Type: text/html; charset=utf-8
Content-Transfer-Encoding: 8bit
<html>
<head>
<meta content="text/html; charset=utf-8"
http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<p>Thank you, <br>
</p>
<p>i solved it by copying the websocket-proxy cert/key-pair.</p>
<p>Bye<br>
</p>
<br>
<div class="moz-cite-prefix">Am 24.08.2016 um 22:15 schrieb Yedidyah
Bar David:<br>
</div>
<blockquote
cite="mid:CAHRwYXu4OjC1_2CZtvsMAhKYPck7d1u0ZfxA9uWV+Egu+99Lmw@mail.gmail.com"
type="cite">
<div dir="ltr">
<div class="gmail_extra">
<div class="gmail_quote">On Wed, Aug 24, 2016 at 9:57 PM, Ralf
Schenk <span dir="ltr"><<a
moz-do-not-send="true"
href="mailto:rs@databay.de"
target="_blank">rs(a)databay.de</a>&gt;</span>
wrote:<br>
<blockquote class="gmail_quote" style="margin:0px 0px 0px
0.8ex;border-left:1px solid
rgb(204,204,204);padding-left:1ex">
<div bgcolor="#FFFFFF" text="#000000">
<p>Hello List,<br>
</p>
<p>After upgrading ovirt-hosted-engine setup failed with
"Failed to start service
'ovirt-imageio-proxy'".</p>
<p>If try to start it manually via <br>
</p>
journalctl -xe shows following error:<br>
Aug 24 20:51:10 engine.mydomain.local
ovirt-imageio-proxy[7635]: self._secure_server(config,
server)<br>
Aug 24 20:51:10 engine.mydomain.local
ovirt-imageio-proxy[7635]: File
"/usr/lib/python2.7/site-<wbr>packages/ovirt_imageio_proxy/<wbr>server.py",
line<br>
Aug 24 20:51:10 engine.mydomain.local
ovirt-imageio-proxy[7635]: server_side=True)<br>
Aug 24 20:51:10 engine.mydomain.local
ovirt-imageio-proxy[7635]: File
"/usr/lib64/python2.7/ssl.py", line 913, in
wrap_socket<br>
Aug 24 20:51:10 engine.mydomain.local
ovirt-imageio-proxy[7635]: ciphers=ciphers)<br>
Aug 24 20:51:10 engine.mydomain.local
ovirt-imageio-proxy[7635]: File
"/usr/lib64/python2.7/ssl.py", line 526, in __init__<br>
Aug 24 20:51:10 engine.mydomain.local
ovirt-imageio-proxy[7635]:
self._context.load_cert_chain(<wbr>certfile, keyfile)<br>
Aug 24 20:51:10 engine.mydomain.local
ovirt-imageio-proxy[7635]: IOError: [Errno 2] No such
file or directory<br>
Aug 24 20:51:10 engine.mydomain.local systemd[1]:
ovirt-imageio-proxy.service: main process exited,
code=exited, status=1/FAILURE<br>
Aug 24 20:51:10 engine.mydomain.local systemd[1]: Failed
to start oVirt ImageIO Proxy.<br>
<br>
Config (/etc/ovirt-imageio-proxy/<wbr>ovirt-imageio-proxy.conf)
points to a non-existing cert<br>
/etc/pki/ovirt-engine/certs/<wbr>imageio-proxy.cer<br>
and nonexisting key:<br>
/etc/pki/ovirt-engine/keys/<wbr>imageio-proxy.key.nopass<br>
</div>
</blockquote>
<div><br>
</div>
<div>Right, will be fixed in 4.0.3:<br>
<br>
<a moz-do-not-send="true"
href="https://bugzilla.redhat.com/show_bug.cgi?id=1365451">h...
</div>
<div> </div>
<blockquote class="gmail_quote" style="margin:0px 0px 0px
0.8ex;border-left:1px solid
rgb(204,204,204);padding-left:1ex">
<div bgcolor="#FFFFFF" text="#000000"> <br>
How to generate a correct cert and key for correct
startup ?<br>
</div>
</blockquote>
<div><br>
</div>
<div>There is no simple single one-liner to do that for now.<br>
</div>
<div><br>
</div>
<div>Search for "pki-enroll-pkcs12.sh" for examples if you
really want to.<br>
</div>
<div><br>
</div>
<div>You can copy e.g. websocket-proxy key/cert.<br>
<br>
</div>
<div>You can use the 4.0 nightly repo - bugs in MODIFIED are
already fixed there:<br>
<br>
<a moz-do-not-send="true"
href="http://www.ovirt.org/develop/dev-process/install-nightly-snaps...
</div>
<div><br>
</div>
<div>You can answer 'no' to 'configure image i/o
proxy?', if
you don't need it.<br>
</div>
<div>It's only needed for the new image uploader:<br>
<br>
<a moz-do-not-send="true"
href="http://www.ovirt.org/develop/release-management/features/stora...
</div>
<div><br>
</div>
<div>Or you can wait for 4.0.3.<br>
<br>
</div>
<div>Best,<br>
</div>
<div> </div>
<blockquote class="gmail_quote" style="margin:0px 0px 0px
0.8ex;border-left:1px solid
rgb(204,204,204);padding-left:1ex">
<div bgcolor="#FFFFFF" text="#000000"> <br>
Bye<br>
<div>-- <br>
<p> </p>
<table border="0" cellpadding="0"
cellspacing="0">
<tbody>
<tr>
<td colspan="3"><img
src="cid:part5.7E7A92B2.2B4B6178@databay.de"
height="30" border="0"
width="151"></td>
</tr>
<tr>
<td valign="top"> <font face="Verdana,
Arial,
sans-serif" size="-1"><br>
<b>Ralf Schenk</b><br>
fon <a moz-do-not-send="true"
href="tel:%2B49%20%280%29%2024%2005%20%2F%2040%2083%2070"
value="+492405408370"
target="_blank">+49
(0) 24 05 / 40 83 70</a><br>
fax <a moz-do-not-send="true"
href="tel:%2B49%20%280%29%2024%2005%20%2F%2040%2083%20759"
value="+4924054083759"
target="_blank">+49
(0) 24 05 / 40 83 759</a><br>
mail <a moz-do-not-send="true"
href="mailto:rs@databay.de"
target="_blank"><font
color="#FF0000"><b>rs(a)databay.de</b></font></a><br>
</font> </td>
<td width="30"> </td>
<td valign="top"> <font face="Verdana,
Arial,
sans-serif" size="-1"><br>
<b>Databay AG</b><br>
Jens-Otto-Krag-Straße 11<br>
D-52146 Würselen<br>
<a moz-do-not-send="true"
href="http://www.databay.de"
target="_blank"><font
color="#FF0000"><b>www.databay.de</b></font></a>
</font> </td>
</tr>
<tr>
<td colspan="3" valign="top"> <font
face="Verdana, Arial, sans-serif"
size="1"><br>
Sitz/Amtsgericht Aachen • HRB:8437 •
USt-IdNr.: DE 210844202<br>
Vorstand: Ralf Schenk, Dipl.-Ing. Jens
Conze, Aresch Yavari, Dipl.-Kfm. Philipp
Hermanns<br>
Aufsichtsratsvorsitzender: Klaus Scholzen
(RA) </font> </td>
</tr>
</tbody>
</table>
<hr color="#000000" noshade="noshade"
size="1"
width="100%"> </div>
</div>
<br>
______________________________<wbr>_________________<br>
Users mailing list<br>
<a moz-do-not-send="true"
href="mailto:Users@ovirt.org">Users@ovirt.org</a><br>
<a moz-do-not-send="true"
href="http://lists.ovirt.org/mailman/listinfo/users"
rel="noreferrer"
target="_blank">http://lists.ovirt.org/<wbr>mailman/li...
<br>
</blockquote>
</div>
<br>
<br clear="all">
<br>
-- <br>
<div class="gmail_signature"
data-smartmail="gmail_signature">Didi<br>
</div>
</div>
</div>
</blockquote>
<br>
<div class="moz-signature">-- <br>
<p>
</p>
<table border="0" cellpadding="0"
cellspacing="0">
<tbody>
<tr>
<td colspan="3"><img
src="cid:part12.DACE6CF2.BDD8450F@databay.de"
height="30" border="0"
width="151"></td>
</tr>
<tr>
<td valign="top"> <font face="Verdana, Arial,
sans-serif"
size="-1"><br>
<b>Ralf Schenk</b><br>
fon +49 (0) 24 05 / 40 83 70<br>
fax +49 (0) 24 05 / 40 83 759<br>
mail <a href="mailto:rs@databay.de"><font
color="#FF0000"><b>rs(a)databay.de</b></font></a><br>
</font> </td>
<td width="30"> </td>
<td valign="top"> <font face="Verdana, Arial,
sans-serif"
size="-1"><br>
<b>Databay AG</b><br>
Jens-Otto-Krag-Straße 11<br>
D-52146 Würselen<br>
<a href="http://www.databay.de"><font
color="#FF0000"><b>www.databay.de</b></font></a>
</font> </td>
</tr>
<tr>
<td colspan="3" valign="top"> <font
face="Verdana, Arial,
sans-serif" size="1"><br>
Sitz/Amtsgericht Aachen • HRB:8437 • USt-IdNr.: DE
210844202<br>
Vorstand: Ralf Schenk, Dipl.-Ing. Jens Conze, Aresch
Yavari, Dipl.-Kfm. Philipp Hermanns<br>
Aufsichtsratsvorsitzender: Wilhelm Dohmen </font> </td>
</tr>
</tbody>
</table>
<hr color="#000000" noshade="noshade" size="1"
width="100%">
</div>
</body>
</html>
--------------6E0E059AD361035ABCE04F21
Content-Type: image/gif
Content-Transfer-Encoding: base64
Content-ID: <part5.7E7A92B2.2B4B6178(a)databay.de>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--------------6E0E059AD361035ABCE04F21
Content-Type: image/gif;
name="logo_databay_email.gif"
Content-Transfer-Encoding: base64
Content-ID: <part12.DACE6CF2.BDD8450F(a)databay.de>
Content-Disposition: inline;
filename="logo_databay_email.gif"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--------------6E0E059AD361035ABCE04F21--
--------------139A302E9F372A196BAE7FC0--