[ovirt-users] Upgrade problem

[Simone Tiraboschi]

On Mon, Sep 14, 2015 at 8:27 PM, Koen Vanoppen <vanoppen.koen at gmail.com>
wrote:

> Yes,
> That will indeed be the issue I think. But... Can you explain to me what
> steps I need to take? I rather not change my certs...
>

The issue is that the setup is going to extract the cert to verify its
compatibility with latest browser but to do that it assumes that it was
created with our internal CA with the default password.
So it fails if the user substituted the apache cert with a certificate
signed by a different CA and protected with a different password.

We'll fix it for the next release but I can suggest you a workaround:
- Backup the current /etc/pki/ovirt-engine/keys/apache.p12
- Recreate the apache.p12 with the password 'mypass':
  openssl pkcs12 -export -out /etc/pki/ovirt-engine/keys/apache.p12 -inkey
/etc/pki/ovirt-engine/keys/apache.key.nopass -in
/etc/pki/ovirt-engine/certs/apache.cer
When prompted for password use 'mypass' without the quotation marks
- execute engine-setup to upgrade
- if you prefer, restore your original
/etc/pki/ovirt-engine/keys/apache.p12 and restart the Apache server.


> Kind regards and thanks for your help,
>
> Koen
>
> On 11 September 2015 at 19:25, Yaniv Kaul <ykaul at redhat.com> wrote:
>
>> On 11/09/15 19:18, Koen Vanoppen wrote:
>>
>> Hi everybody,
>>
>> I'm trying to upgrade ovirt to the ovirt 3.5.4 from my current version
>> 3.5.3.
>> But when I try to run engine-setup I got this:
>>
>> [ INFO  ] Checking for product updates...
>>           Setup has found updates for some packages, do you wish to
>> update them now? (Yes, No) [Yes]:
>> [ INFO  ] Checking for an update for Setup...
>>
>>           --== ALL IN ONE CONFIGURATION ==--
>>
>>
>>           --== NETWORK CONFIGURATION ==--
>>
>>           Setup can automatically configure the firewall on this system.
>>           Note: automatic configuration of the firewall may overwrite
>> current settings.
>>           Do you want Setup to configure the firewall? (Yes, No) [Yes]:
>> [ INFO  ] firewalld will be configured as firewall manager.
>>
>>           --== DATABASE CONFIGURATION ==--
>>
>>           The detected DWH database size is 198 MB.
>>           Setup can backup the existing database. The time and space
>> required for the database backup depend on its size. This process takes
>> time, and in some cases (for instance, when the size is few GBs) may take
>> several hours to complete.
>>           If you choose to not back up the database, and Setup later
>> fails for some reason, it will not be able to restore the database and all
>> DWH data will be lost.
>>           Would you like to backup the existing database before upgrading
>> it? (Yes, No) [Yes]:
>>
>>           --== OVIRT ENGINE CONFIGURATION ==--
>>
>>           Skipping storing options as database already prepared
>>
>>           --== PKI CONFIGURATION ==--
>>
>> [ ERROR ] Failed to execute stage 'Environment customization': Command
>> '/bin/openssl' failed to execute
>> [ INFO  ] Stage: Clean up
>>           Log file is located at
>> /var/log/ovirt-engine/setup/ovirt-engine-setup-20150911181604-1gft67.log
>> [ INFO  ] Generating answer file
>> '/var/lib/ovirt-engine/setup/answers/20150911181626-setup.conf'
>> [ INFO  ] Stage: Pre-termination
>> [ INFO  ] Stage: Termination
>> [ ERROR ] Execution of setup failed
>>
>>
>> Any idea?
>>
>>
>> Looks like https://bugzilla.redhat.com/show_bug.cgi?id=1260752 .
>> Y.
>>
>>
>> Kind regards,
>>
>> Koen
>>
>>
>> _______________________________________________
>> Users mailing listUsers at ovirt.orghttp://lists.ovirt.org/mailman/listinfo/users
>>
>>
>>
>
> _______________________________________________
> Users mailing list
> Users at ovirt.org
> http://lists.ovirt.org/mailman/listinfo/users
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.ovirt.org/pipermail/users/attachments/20150915/1a58b088/attachment-0001.html>