[Users] Engine-setup problem (SSL)

justin potts justinpotts.al at gmail.com
Fri Jan 20 19:39:24 EST 2012


Here is the engine-setup log: http://fpaste.org/J70b/


2012-01-20 19:33:43::DEBUG::common_utils::219::root:: Executing
command --> '/etc/pki/ovirt-engine/installCA.sh ovirt.grims.com US
gimrsovirt engine ******** 120119193343+0500 /etc/pki/ovirt-engine
ovirt.grims.com.83876'
2012-01-20 19:33:45::DEBUG::common_utils::226::root:: output =
} Creating CA...

} Creating KeyStore...

}} Converting formats...

> Importing CA certificate...

} Creating client certificate for oVirt...

}} Creating certificate request...

}} Signing certificate request...

2012-01-20 19:33:45::DEBUG::common_utils::227::root:: stderr =
Generating RSA private key, 1024 bit long modulus
....................++++++
......................................++++++
e is 65537 (0x10001)
Using configuration from openssl.conf
Check that the request matches the signature
Signature ok
The Subject's Distinguished Name is as follows
countryName           :PRINTABLE:'US'
organizationName      :PRINTABLE:'gimrsovirt'
commonName            :PRINTABLE:'CA-ovirt.grims.com.83876'
Certificate is to be certified until Jan 18 00:33:43 2022 GMT (3650 days)

Write out database with 1 new entries
Data Base Updated
Certificate was added to keystore
Certificate was added to keystore
./SignReq.sh: line 79: /var/lock/ovirt-engine/.openssl.exclusivelock:
No such file or directory
file certs/engine.cer does not exist!
2012-01-20 19:33:45::DEBUG::common_utils::228::root:: retcode = 1
2012-01-20 19:33:45::ERROR::engine-setup::825::root:: Traceback (most
recent call last):
  File "/usr/bin/engine-setup", line 789, in _createCA
    out, rc = utils.execCmd(cmd, None, True,
output_messages.ERR_RC_CODE, [basedefs.CONST_CA_PASS])
  File "/usr/share/ovirt-engine/scripts/common_utils.py", line 231, in execCmd
    raise Exception(msg)
Exception: Return Code is not zero

2012-01-20 19:33:45::DEBUG::engine-setup::1759::root:: *** The
following params were used as user input:
2012-01-20 19:33:45::DEBUG::engine-setup::1763::root:: override-iptables: no
2012-01-20 19:33:45::DEBUG::engine-setup::1763::root:: http-port: 8080
2012-01-20 19:33:45::DEBUG::engine-setup::1763::root:: https-port: 8443
2012-01-20 19:33:45::DEBUG::engine-setup::1763::root:: mac-range:
00:1A:4A:A8:7B:00-00:1A:4A:A8:7B:FF
2012-01-20 19:33:45::DEBUG::engine-setup::1763::root:: host-fqdn:
ovirt.grims.com
2012-01-20 19:33:45::DEBUG::engine-setup::1763::root:: auth-pass: ********
2012-01-20 19:33:45::DEBUG::engine-setup::1763::root:: db-pass: ********
2012-01-20 19:33:45::DEBUG::engine-setup::1763::root:: org-name: gimrsovirt
2012-01-20 19:33:45::DEBUG::engine-setup::1763::root:: default-dc-type: NFS
2012-01-20 19:33:45::DEBUG::engine-setup::1763::root:: config-nfs: yes
2012-01-20 19:33:45::DEBUG::engine-setup::1763::root:: nfs-mp: /exported
2012-01-20 19:33:45::DEBUG::engine-setup::1763::root:: iso-domain-name: grims
2012-01-20 19:33:45::ERROR::engine-setup::2453::root:: Traceback (most
recent call last):
  File "/usr/bin/engine-setup", line 2447, in <module>
    main(confFile)
  File "/usr/bin/engine-setup", line 2269, in main
    runMainFunctions(conf)
  File "/usr/bin/engine-setup", line 2176, in runMainFunctions
    runFunction(_createCA, output_messages.INFO_CREATE_CA)
  File "/usr/bin/engine-setup", line 1170, in runFunction
    raise Exception(instance)
Exception: Failed to create certificate authority

-----

[root at fc1664 ~]# host 192.168.123.73
73.123.168.192.in-addr.arpa domain name pointer ovirt.grims.com.
[root at fc1664 ~]# dig @2.3.3.7 ovirt.grims.com +short
192.168.123.73

Postgres is listening:

[root at fc1664 ~]# netstat -ltn | grep -i 5432
tcp        0      0 127.0.0.1:5432              0.0.0.0:*
     LISTEN

I can't quite figure this one out. I installed from the repos and the
only thing missing so far is that I have not actually configured
/exported as an NFS mount but I don't think that would cause this
issue. I also ran an engine-cleanup before this command it it came
back all OKAY. Any help is appreciated as I am excited to get this up
and running.



More information about the Users mailing list