[ovirt-devel] No migration in master (WrongHost: Peer certificate commonName does not match host, expected 10.35.0.112, got xxxxxx.tlv.redhat.com)

[Yedidyah Bar David]

On Wed, Feb 10, 2016 at 7:22 PM, Nir Soffer <nsoffer at redhat.com> wrote:
> More details:
>
> - Tried couple of times
> - Enrolled new certificate, reboot - no change
> - Tried on 2 different hosts, 2 ways (a -> b, b -> a) - same result
>
> On Wed, Feb 10, 2016 at 7:19 PM, Nir Soffer <nsoffer at redhat.com> wrote:
>> Hi all,
>>
>> Migration is broken in master, using oVirt Engine Version:
>> 3.6.1-0.0.master.20151113175558.git6a36a6d.fc22

Seems like a pretty old master to me. Perhaps try fc23 (not perfect but
partially working) or el7.

>>
>> It fails with this error:
>>
>> Thread-247::ERROR::2016-02-10
>> 18:51:57,582::migration::323::virt.vm::(run)
>> vmId=`44ba3800-e179-4744-b9aa-952483c23030`::Failed to migrate
>> Traceback (most recent call last):
>>   File "/usr/share/vdsm/virt/migration.py", line 292, in run
>>     self._setupVdsConnection()
>>   File "/usr/share/vdsm/virt/migration.py", line 156, in _setupVdsConnection
>>     client = self._createClient(port)
>>   File "/usr/share/vdsm/virt/migration.py", line 143, in _createClient
>>     client_socket = utils.create_connected_socket(host, int(port), sslctx)
>>   File "/usr/lib/python2.7/site-packages/vdsm/utils.py", line 860, in
>> create_connected_socket
>>     sock.connect(sockaddr)
>>   File "/usr/lib64/python2.7/site-packages/M2Crypto/SSL/Connection.py",
>> line 188, in connect
>>     if not check(self.get_peer_cert(), self.addr[0]):
>>   File "/usr/lib64/python2.7/site-packages/M2Crypto/SSL/Checker.py",
>> line 124, in __call__
>>     fieldName='commonName')
>> WrongHost: Peer certificate commonName does not match host, expected
>> 10.35.0.112, got xxxxxx.tlv.redhat.com
>>
>> Hopefully someone can take a look.
>>
>> Cheers,
>> Nir



-- 
Didi