[ovirt-users] Upgrade problem

[Koen Vanoppen]

Super!! Thanks man!! Worked like a charm!

Kind regards,

Koen

On 15 September 2015 at 10:06, Simone Tiraboschi <stirabos at redhat.com>
wrote:

>
>
> On Mon, Sep 14, 2015 at 8:27 PM, Koen Vanoppen <vanoppen.koen at gmail.com>
> wrote:
>
>> Yes,
>> That will indeed be the issue I think. But... Can you explain to me what
>> steps I need to take? I rather not change my certs...
>>
>
> The issue is that the setup is going to extract the cert to verify its
> compatibility with latest browser but to do that it assumes that it was
> created with our internal CA with the default password.
> So it fails if the user substituted the apache cert with a certificate
> signed by a different CA and protected with a different password.
>
> We'll fix it for the next release but I can suggest you a workaround:
> - Backup the current /etc/pki/ovirt-engine/keys/apache.p12
> - Recreate the apache.p12 with the password 'mypass':
>   openssl pkcs12 -export -out /etc/pki/ovirt-engine/keys/apache.p12 -inkey
> /etc/pki/ovirt-engine/keys/apache.key.nopass -in
> /etc/pki/ovirt-engine/certs/apache.cer
> When prompted for password use 'mypass' without the quotation marks
> - execute engine-setup to upgrade
> - if you prefer, restore your original
> /etc/pki/ovirt-engine/keys/apache.p12 and restart the Apache server.
>
>
>> Kind regards and thanks for your help,
>>
>> Koen
>>
>> On 11 September 2015 at 19:25, Yaniv Kaul <ykaul at redhat.com> wrote:
>>
>>> On 11/09/15 19:18, Koen Vanoppen wrote:
>>>
>>> Hi everybody,
>>>
>>> I'm trying to upgrade ovirt to the ovirt 3.5.4 from my current version
>>> 3.5.3.
>>> But when I try to run engine-setup I got this:
>>>
>>> [ INFO  ] Checking for product updates...
>>>           Setup has found updates for some packages, do you wish to
>>> update them now? (Yes, No) [Yes]:
>>> [ INFO  ] Checking for an update for Setup...
>>>
>>>           --== ALL IN ONE CONFIGURATION ==--
>>>
>>>
>>>           --== NETWORK CONFIGURATION ==--
>>>
>>>           Setup can automatically configure the firewall on this system.
>>>           Note: automatic configuration of the firewall may overwrite
>>> current settings.
>>>           Do you want Setup to configure the firewall? (Yes, No) [Yes]:
>>> [ INFO  ] firewalld will be configured as firewall manager.
>>>
>>>           --== DATABASE CONFIGURATION ==--
>>>
>>>           The detected DWH database size is 198 MB.
>>>           Setup can backup the existing database. The time and space
>>> required for the database backup depend on its size. This process takes
>>> time, and in some cases (for instance, when the size is few GBs) may take
>>> several hours to complete.
>>>           If you choose to not back up the database, and Setup later
>>> fails for some reason, it will not be able to restore the database and all
>>> DWH data will be lost.
>>>           Would you like to backup the existing database before
>>> upgrading it? (Yes, No) [Yes]:
>>>
>>>           --== OVIRT ENGINE CONFIGURATION ==--
>>>
>>>           Skipping storing options as database already prepared
>>>
>>>           --== PKI CONFIGURATION ==--
>>>
>>> [ ERROR ] Failed to execute stage 'Environment customization': Command
>>> '/bin/openssl' failed to execute
>>> [ INFO  ] Stage: Clean up
>>>           Log file is located at
>>> /var/log/ovirt-engine/setup/ovirt-engine-setup-20150911181604-1gft67.log
>>> [ INFO  ] Generating answer file
>>> '/var/lib/ovirt-engine/setup/answers/20150911181626-setup.conf'
>>> [ INFO  ] Stage: Pre-termination
>>> [ INFO  ] Stage: Termination
>>> [ ERROR ] Execution of setup failed
>>>
>>>
>>> Any idea?
>>>
>>>
>>> Looks like https://bugzilla.redhat.com/show_bug.cgi?id=1260752 .
>>> Y.
>>>
>>>
>>> Kind regards,
>>>
>>> Koen
>>>
>>>
>>> _______________________________________________
>>> Users mailing listUsers at ovirt.orghttp://lists.ovirt.org/mailman/listinfo/users
>>>
>>>
>>>
>>
>> _______________________________________________
>> Users mailing list
>> Users at ovirt.org
>> http://lists.ovirt.org/mailman/listinfo/users
>>
>>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.ovirt.org/pipermail/users/attachments/20150915/5ab5cfd0/attachment-0001.html>