[ovirt-devel] No migration in master (WrongHost: Peer certificate commonName does not match host, expected 10.35.0.112, got xxxxxx.tlv.redhat.com)

[Nir Soffer]

More details:

- Tried couple of times
- Enrolled new certificate, reboot - no change
- Tried on 2 different hosts, 2 ways (a -> b, b -> a) - same result

On Wed, Feb 10, 2016 at 7:19 PM, Nir Soffer <nsoffer at redhat.com> wrote:
> Hi all,
>
> Migration is broken in master, using oVirt Engine Version:
> 3.6.1-0.0.master.20151113175558.git6a36a6d.fc22
>
> It fails with this error:
>
> Thread-247::ERROR::2016-02-10
> 18:51:57,582::migration::323::virt.vm::(run)
> vmId=`44ba3800-e179-4744-b9aa-952483c23030`::Failed to migrate
> Traceback (most recent call last):
>   File "/usr/share/vdsm/virt/migration.py", line 292, in run
>     self._setupVdsConnection()
>   File "/usr/share/vdsm/virt/migration.py", line 156, in _setupVdsConnection
>     client = self._createClient(port)
>   File "/usr/share/vdsm/virt/migration.py", line 143, in _createClient
>     client_socket = utils.create_connected_socket(host, int(port), sslctx)
>   File "/usr/lib/python2.7/site-packages/vdsm/utils.py", line 860, in
> create_connected_socket
>     sock.connect(sockaddr)
>   File "/usr/lib64/python2.7/site-packages/M2Crypto/SSL/Connection.py",
> line 188, in connect
>     if not check(self.get_peer_cert(), self.addr[0]):
>   File "/usr/lib64/python2.7/site-packages/M2Crypto/SSL/Checker.py",
> line 124, in __call__
>     fieldName='commonName')
> WrongHost: Peer certificate commonName does not match host, expected
> 10.35.0.112, got xxxxxx.tlv.redhat.com
>
> Hopefully someone can take a look.
>
> Cheers,
> Nir