Hello George, Probably your engine and provider certs do not match. The engine pki should be in: /etc/pki/ovirt-engine/certs/ The provider keys are defined in the SSL section of the config file (/etc/ovirt-provider-ovn/conf.d/...): [SSL] https-enabled=true ssl-key-file=... ssl-cert-file=... ssl-cacert-file=... You can compare the keys/certs using openssl. Was the provider created using egine-setup? For testing purposes you can change the "https-enabled" to false and try connecting using http. Thanks, Marcin On Thu, Feb 8, 2018 at 12:58 PM, Ilya Fedotov <kosha79@gmail.com> wrote:

Hello, Georgy

Maybe, the problem have the different domain name and name your node name(local domain), and certificate note valid.

with br, Ilya

2018-02-05 22:36 GMT+03:00 George Sitov <usual.man@gmail.com>:

...

Hello!

I have a problem wiith configure external provider.

Edit config file - ovirt-provider-ovn.conf, set ssl parameters. systemctl start ovirt-provider-ovn start without problem. In external proveder in web gui i set: Provider URL: https://ovirt.mydomain.com:9696 Username: admin@internal Authentication URL: https://ovirt.mydomain.com:35357/v2.0/ But after i press test button i see error - Failed to communicate with the external provider, see log for additional details.

/var/log/ovirt-engine/engine.log: 2018-02-05 21:33:55,517+02 ERROR [org.ovirt.engine.core.bll.pro vider.network.openstack.BaseNetworkProviderProxy] (default task-29) [69fa312e-6e2e-4925-b081-385beba18a6a] Bad Gateway (OpenStack response error code: 502) 2018-02-05 21:33:55,517+02 ERROR [org.ovirt.engine.core.bll.pro vider.TestProviderConnectivityCommand] (default task-29) [69fa312e-6e2e-4925-b081-385beba18a6a] Command ' org.ovirt.engine.core.bll.provider.TestProviderConnectivityCommand' failed: EngineException: (Failed with error PROVIDER_FAILURE and code 5050)

In /var/log/ovirt-provider-ovn.log:

2018-02-05 21:33:55,510 Starting new HTTPS connection (1): ovirt.astrecdata.com 2018-02-05 21:33:55,516 [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:579) Traceback (most recent call last): File "/usr/share/ovirt-provider-ovn/handlers/base_handler.py", line 126, in _handle_request method, path_parts, content) File "/usr/share/ovirt-provider-ovn/handlers/selecting_handler.py", line 176, in handle_request return self.call_response_handler(handler, content, parameters) File "/usr/share/ovirt-provider-ovn/handlers/keystone.py", line 33, in call_response_handler return response_handler(content, parameters) File "/usr/share/ovirt-provider-ovn/handlers/keystone_responses.py", line 60, in post_tokens user_password=user_password) File "/usr/share/ovirt-provider-ovn/auth/plugin_facade.py", line 26, in create_token return auth.core.plugin.create_token(user_at_domain, user_password) File "/usr/share/ovirt-provider-ovn/auth/plugins/ovirt/plugin.py", line 48, in create_token timeout=self._timeout()) File "/usr/share/ovirt-provider-ovn/auth/plugins/ovirt/sso.py", line 62, in create_token username, password, engine_url, ca_file, timeout) File "/usr/share/ovirt-provider-ovn/auth/plugins/ovirt/sso.py", line 53, in wrapper response = func(*args, **kwargs) File "/usr/share/ovirt-provider-ovn/auth/plugins/ovirt/sso.py", line 46, in wrapper raise BadGateway(e) BadGateway: [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:579)

Whan i do wrong ? Please help.

---- With best regards Georgii.

_______________________________________________ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users

_______________________________________________ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users