<div dir="ltr">Hi Martin,<br>
</div><div dir="ltr"><br>
</div><div dir="ltr">Actually, up until now we had that cert configured in httpd and in websocket proxy. Seems that now in 4.0.x it's not enough, as opening the https://fqdn complains about the cert not being imported in the key chain. So I imported it via keytool, but I don't want to use it in the engine <-> VDSM communication.<br>
</div><div dir="ltr"><br>
</div><div dir="ltr">Thanks!</div><div class="wps_quotion">En 20/7/2016 2:48 p. m., Martin Perina <mperina@redhat.com> escribió:<br type="attribution"><blockquote class="quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr"><div class="gmail_default" style="font-family:arial,helvetica,sans-serif">Hi,<br><br></div><div class="gmail_default" style="font-family:arial,helvetica,sans-serif">sorry for late response, I overlook your reply :-(<br><br></div><div class="gmail_extra"><div class="gmail_default" style="font-family:arial,helvetica,sans-serif">I looked at your logs and it seems to me that there's SSL error when engine tries to contact VDSM.<br></div><div class="gmail_default" style="font-family:arial,helvetica,sans-serif;display:inline">You have mentioned that your are using your own custom CA. Are you using it only for HTTPS certificate or do you want to use it also for Engine <-> VDSM communication?<br><br></div><div class="gmail_default" style="font-family:arial,helvetica,sans-serif;display:inline">Martin Perina<br></div><div class="gmail_default" style="font-family:arial,helvetica,sans-serif"> <br></div><br><div class="gmail_quote">On Wed, Jul 20, 2016 at 9:18 AM, <span dir="ltr"><<a href="mailto:nicolas@devels.es" target="_blank">nicolas@devels.es</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">Any hints about this?<br>
<br>
El 2016-07-13 11:13, <a href="mailto:nicolas@devels.es" target="_blank">nicolas@devels.es</a> escribió:<br>
<blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">
Hi,<br>
<br>
Unfortunately, upgrading to 4.0.1RC didn't solve the problem.<br>
Actually, the error changed to 'General SSLEngine problem', but the<br>
result was the same, like this:<br>
<br>
2016-07-13 09:52:22,010 INFO<br>
[org.ovirt.vdsm.jsonrpc.client.reactors.ReactorClient] (SSL Stomp<br>
Reactor) [] Connecting to /10.X.X.X<br>
2016-07-13 09:52:22,018 ERROR<br>
[org.ovirt.vdsm.jsonrpc.client.reactors.Reactor] (SSL Stomp Reactor)<br>
[] Unable to process messages: General SSLEngine problem<br>
<br>
It's worth mentioning that we're using our own SSL certificates (not<br>
self-signed), and I imported the combined certificate into the<br>
/etc/pki/ovirt-engine/.truststore key file. Not sure if related, but<br>
just in case.<br></blockquote></blockquote><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">
<br>
I had to downgrade to 3.6.7. I'm attaching requested logs, if you need<br>
anything else don't hesitate to ask.<br>
<br>
Regards.<br>
<br>
El 2016-07-13 09:45, Martin Perina escribió:<br>
<blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">
Hi,<br>
<br>
could you please share also vdsm.log from your hosts and also<br>
server.log and setup logs from /var/log/ovirt-engine/setup directory?<br>
<br>
Thanks<br>
<br>
Martin Perina<br>
<br>
On Wed, Jul 13, 2016 at 10:36 AM, <<a href="mailto:nicolas@devels.es" target="_blank">nicolas@devels.es</a>> wrote:<br>
<br>
<blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">
Hi,<br>
<br>
We upgraded from 3.6.6 to 4.0.0 and we have a big issue since the<br>
engine cannot connect to hosts. In the logs all we see is this<br>
error:<br>
<br>
ERROR [org.ovirt.vdsm.jsonrpc.client.reactors.Reactor] (SSL<br>
Stomp Reactor) [] Unable to process messages<br>
<br>
I'm attaching full logs.<br>
<br>
Could someone help please?<br>
<br>
Thanks.<br>
_______________________________________________<br>
Users mailing list<br>
<a href="mailto:Users@ovirt.org" target="_blank">Users@ovirt.org</a><br>
<a href="http://lists.ovirt.org/mailman/listinfo/users" rel="noreferrer" target="_blank">http://lists.ovirt.org/mailman/listinfo/users</a> [1]<br>
</blockquote>
<br>
<br>
<br>
Links:<br>
------<br>
[1] <a href="http://lists.ovirt.org/mailman/listinfo/users" rel="noreferrer" target="_blank">http://lists.ovirt.org/mailman/listinfo/users</a><br>
</blockquote>
<br>
_______________________________________________<br>
Users mailing list<br>
<a href="mailto:Users@ovirt.org" target="_blank">Users@ovirt.org</a><br>
<a href="http://lists.ovirt.org/mailman/listinfo/users" rel="noreferrer" target="_blank">http://lists.ovirt.org/mailman/listinfo/users</a><br>
</blockquote>
</blockquote></div><br></div></div>
</blockquote></div>