Hi Vojtech,

could you please provide
- on host:
cat /etc/pki/vdsm/certs/cacert.pem
- on engine:
rpm -qa "*ansible-runner*"
cat /etc/ansible-runner-service/config.yaml

My guess is that in the ovirt-release44-pre is missing this patch [1]
but you have the newest ansible-runner.

[1] https://gerrit.ovirt.org/#/c/108532/

Martin Necas

On Tue, May 19, 2020 at 12:53 AM Vojtech Juranek <[email protected]>
wrote:

> Hi,
> I'm getting following SSL error when adding new host:
>
> engine:
>
> [...]
> 2020-05-18 18:28:35,530-04 WARN
> [org.ovirt.vdsm.jsonrpc.client.utils.retry.Retryable]
> (EE-ManagedThreadFactory-engine-Thread-42) [762c711c] Retry failed
> 2020-05-18 18:28:39,033-04 WARN
> [org.ovirt.vdsm.jsonrpc.client.utils.retry.Retryable]
> (EE-ManagedThreadFactory-engine-Thread-43) [762c711c] Retry failed
> 2020-05-18 18:28:39,033-04 ERROR
> [org.ovirt.engine.core.bll.hostdeploy.InstallVdsInternalCommand]
> (EE-ManagedThreadFactory-engine-Thread-3) [762c711c] Host installation
> failed for host 'ab082e77-315c-4cfe-8188-11fbee94c2b8', 'fc30-glance':
> Network error during communication with the host
>
> host (vdsm log):
>
> 2020-05-18 18:26:36,963-0400 ERROR (Reactor thread) [vds.dispatcher]
> uncaptured python exception, closing channel
> <yajsonrpc.betterAsyncore.Dispatcher connected ('::ffff:192.168.122.246',
> 52428, 0, 0) at 0x7f9f8c7e8d30> (<class 'ssl.SSLError'>:[X509] no
> certificate or crl found (_ssl.c:4053)
> [/usr/lib64/python3.7/asyncore.py|readwrite|110]
> [/usr/lib64/python3.7/asyncore.py|handle_write_event|441]
> [/usr/lib/python3.7/site-packages/yajsonrpc/betterAsyncore.py|handle_write|75]
> [/usr/lib/python3.7/site-packages/yajsonrpc/betterAsyncore.py|_delegate_call|173]
> [/usr/lib/python3.7/site-packages/vdsm/sslutils.py|handle_write|190]
> [/usr/lib/python3.7/site-packages/vdsm/sslutils.py|_handle_io|194]
> [/usr/lib/python3.7/site-packages/vdsm/sslutils.py|_set_up_socket|154])
> (betterAsyncore:184)
>
> Any idea what's wrong and/or how to fix it?
>
> Both engine and host are on FC30, host is installed from standard
> ovirt-release44-pre
> repo and engine is dev build of latest engine master with glance API v2
> patches [1].
>
> Thanks
> Vojta
>
> [1] https://gerrit.ovirt.org/#/q/topic
> :"Image+Service+API+v2"_______________________________________________
> Devel mailing list -- [email protected]
> To unsubscribe send an email to [email protected]
> Privacy Statement: https://www.ovirt.org/privacy-policy.html
> oVirt Code of Conduct:
> https://www.ovirt.org/community/about/community-guidelines/
> List Archives:
> https://lists.ovirt.org/archives/list/[email protected]/message/VSM7HZN5EB27ADN6NJFQMN32Y42ZJESO/
>
_______________________________________________
Devel mailing list -- [email protected]
To unsubscribe send an email to [email protected]
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct: 
https://www.ovirt.org/community/about/community-guidelines/
List Archives: 
https://lists.ovirt.org/archives/list/[email protected]/message/6VFCG2SJTBOGRXDHZUOCK2BCSAXVIBDY/

Reply via email to