[ovirt-users] Re: HELP ME! Failed to validate the SSL certificate for localhost:443
Hi all,
I solved the problem.
solution:
add "validate_certs: false"
$vi
/usr/share/ansible/roles/ovirt.hosted_engine_setup/tasks/bootstrap_local_vm/05_add_host.yml
name: Wait for ovirt-engine service to start
uri:
validate_certs: false <= add this !!
url: http://{{ he_fqdn }}/ovirt-engine/services/health
return_content: true
register: engine_status
until: "'DB Up!Welcome to Health Status!' in engine_status.content"
retries: 30
delay: 20
- debug: var=engine_status
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct:
https://www.ovirt.org/community/about/community-guidelines/
List Archives:
https://lists.ovirt.org/archives/list/users@ovirt.org/message/RQI7P6PDVFFJHLWLZRKH4DK6KOIBJZWH/
[ovirt-users] Re: HELP ME! Failed to validate the SSL certificate for localhost:443
I ran the command ps -ef and got the following message: = [root@raot-trt-gw ~]# ps -ef UIDPID PPID C STIME TTY TIME CMD root 1 0 0 พ.ค.01 ? 00:00:12 /usr/lib/systemd/systemd --switched-root --system --deserialize 22 root 2 0 0 พ.ค.01 ? 00:00:00 [kthreadd] root 3 2 0 พ.ค.01 ? 00:00:00 [rcu_gp] root 4 2 0 พ.ค.01 ? 00:00:00 [rcu_par_gp] root 6 2 0 พ.ค.01 ? 00:00:00 [kworker/0:0H-kb] root 8 2 0 พ.ค.01 ? 00:00:00 [mm_percpu_wq] root 9 2 0 พ.ค.01 ? 00:00:00 [ksoftirqd/0] root10 2 0 พ.ค.01 ? 00:00:25 [rcu_sched] root11 2 0 พ.ค.01 ? 00:00:00 [migration/0] root13 2 0 พ.ค.01 ? 00:00:00 [cpuhp/0] root14 2 0 พ.ค.01 ? 00:00:00 [cpuhp/1] root15 2 0 พ.ค.01 ? 00:00:00 [migration/1] root16 2 0 พ.ค.01 ? 00:00:00 [ksoftirqd/1] root18 2 0 พ.ค.01 ? 00:00:00 [kworker/1:0H-ev] root19 2 0 พ.ค.01 ? 00:00:00 [cpuhp/2] root20 2 0 พ.ค.01 ? 00:00:00 [migration/2] root21 2 0 พ.ค.01 ? 00:00:00 [ksoftirqd/2] root23 2 0 พ.ค.01 ? 00:00:00 [kworker/2:0H-kb] root24 2 0 พ.ค.01 ? 00:00:00 [cpuhp/3] root25 2 0 พ.ค.01 ? 00:00:00 [migration/3] root26 2 0 พ.ค.01 ? 00:00:00 [ksoftirqd/3] root28 2 0 พ.ค.01 ? 00:00:00 [kworker/3:0H-ev] root29 2 0 พ.ค.01 ? 00:00:00 [cpuhp/4] root30 2 0 พ.ค.01 ? 00:00:00 [migration/4] root31 2 0 พ.ค.01 ? 00:00:00 [ksoftirqd/4] root33 2 0 พ.ค.01 ? 00:00:00 [kworker/4:0H-kb] root34 2 0 พ.ค.01 ? 00:00:00 [cpuhp/5] root35 2 0 พ.ค.01 ? 00:00:00 [migration/5] root36 2 0 พ.ค.01 ? 00:00:00 [ksoftirqd/5] root38 2 0 พ.ค.01 ? 00:00:00 [kworker/5:0H-ev] root39 2 0 พ.ค.01 ? 00:00:00 [cpuhp/6] root40 2 0 พ.ค.01 ? 00:00:00 [migration/6] root41 2 0 พ.ค.01 ? 00:00:00 [ksoftirqd/6] root43 2 0 พ.ค.01 ? 00:00:00 [kworker/6:0H] root44 2 0 พ.ค.01 ? 00:00:00 [cpuhp/7] root45 2 0 พ.ค.01 ? 00:00:00 [migration/7] root46 2 0 พ.ค.01 ? 00:00:00 [ksoftirqd/7] root48 2 0 พ.ค.01 ? 00:00:00 [kworker/7:0H-ev] root49 2 0 พ.ค.01 ? 00:00:00 [cpuhp/8] root50 2 0 พ.ค.01 ? 00:00:00 [migration/8] root51 2 0 พ.ค.01 ? 00:00:00 [ksoftirqd/8] root53 2 0 พ.ค.01 ? 00:00:00 [kworker/8:0H-kb] root54 2 0 พ.ค.01 ? 00:00:00 [cpuhp/9] root55 2 0 พ.ค.01 ? 00:00:00 [migration/9] root56 2 0 พ.ค.01 ? 00:00:00 [ksoftirqd/9] root58 2 0 พ.ค.01 ? 00:00:00 [kworker/9:0H-kb] root59 2 0 พ.ค.01 ? 00:00:00 [cpuhp/10] root60 2 0 พ.ค.01 ? 00:00:00 [migration/10] root61 2 0 พ.ค.01 ? 00:00:00 [ksoftirqd/10] root63 2 0 พ.ค.01 ? 00:00:00 [kworker/10:0H-e] root64 2 0 พ.ค.01 ? 00:00:00 [cpuhp/11] root65 2 0 พ.ค.01 ? 00:00:00 [migration/11] root66 2 0 พ.ค.01 ? 00:00:00 [ksoftirqd/11] root68 2 0 พ.ค.01 ? 00:00:00 [kworker/11:0H-e] root69 2 0 พ.ค.01 ? 00:00:00 [cpuhp/12] root70 2 0 พ.ค.01 ? 00:00:00 [migration/12] root71 2 0 พ.ค.01 ? 00:00:00 [ksoftirqd/12] root73 2 0 พ.ค.01 ? 00:00:00 [kworker/12:0H-k] root74 2 0 พ.ค.01 ? 00:00:00 [cpuhp/13] root75 2 0 พ.ค.01 ? 00:00:00 [migration/13] root76 2 0 พ.ค.01 ? 00:00:00 [ksoftirqd/13] root78 2 0 พ.ค.01 ? 00:00:00 [kworker/13:0H-k] root79 2 0 พ.ค.01 ? 00:00:00 [cpuhp/14] root80 2 0 พ.ค.01 ? 00:00:00 [migration/14] root81 2 0 พ.ค.01 ? 00:00:00 [ksoftirqd/14] root83 2 0 พ.ค.01 ? 00:00:00 [kworker/14:0H-e] root84 2 0 พ.ค.01 ? 00:00:00 [cpuhp/15] root85 2 0 พ.ค.01 ? 00:00:00 [migration/15] root86 2 0 พ.ค.01 ? 00:00:00 [ksoftirqd/15] root88 2 0 พ.ค.01 ? 00:00:00 [kworker/15:0H-k] root89 2 0 พ.ค.01 ? 00:00:00 [cpuhp/16] root90 2 0 พ.ค.01 ? 00:00:00 [migration/16] root91 2 0 พ.ค.01 ? 00:00:00 [ksoftirqd/16] root93 2 0 พ.ค.01 ? 00:00:00 [kworker/16:0H-k] root94 2 0 พ.ค.01 ? 00:00:00 [cpuhp/17] root95 2 0 พ.ค.01 ? 00:00:00 [migration/17] root96 2 0 พ.ค.01 ? 00:00:00 [ksoftirqd/17] root98 2 0 พ.ค.01 ? 00:00:00 [kworker/17:0H-k] root99 2 0 พ.ค.01 ? 00:00:00 [cpuhp/18] root 100 2 0 พ.ค.01 ? 00:00:00 [migration/18] root 101 2 0 พ.ค.01 ? 00:00:00 [ksoftirqd/18] root 103 2 0 พ.ค.01 ?
[ovirt-users] Re: HELP ME! Failed to validate the SSL certificate for localhost:443
Can you try to cleanup and deploy again ?When it fails, use 'ps -ef' to identify if the VM is running or not. Best Regards,Strahil Nikolov The downgrade of the "Postgresql-jdbc" method did not help this problem go away. Thankyou, Bunnatee ___ Users mailing list -- users@ovirt.org To unsubscribe send an email to users-le...@ovirt.org Privacy Statement: https://www.ovirt.org/privacy-policy.html oVirt Code of Conduct: https://www.ovirt.org/community/about/community-guidelines/ List Archives: https://lists.ovirt.org/archives/list/users@ovirt.org/message/2D7EJV3EOB3MTSRUPQBXBU6YTMFV4U6I/ ___ Users mailing list -- users@ovirt.org To unsubscribe send an email to users-le...@ovirt.org Privacy Statement: https://www.ovirt.org/privacy-policy.html oVirt Code of Conduct: https://www.ovirt.org/community/about/community-guidelines/ List Archives: https://lists.ovirt.org/archives/list/users@ovirt.org/message/RZ7I6K45SDYI4YA6VD35ZFAW2LMIW3AS/
[ovirt-users] Re: HELP ME! Failed to validate the SSL certificate for localhost:443
The downgrade of the "Postgresql-jdbc" method did not help this problem go away. Thankyou, Bunnatee ___ Users mailing list -- users@ovirt.org To unsubscribe send an email to users-le...@ovirt.org Privacy Statement: https://www.ovirt.org/privacy-policy.html oVirt Code of Conduct: https://www.ovirt.org/community/about/community-guidelines/ List Archives: https://lists.ovirt.org/archives/list/users@ovirt.org/message/2D7EJV3EOB3MTSRUPQBXBU6YTMFV4U6I/
[ovirt-users] Re: HELP ME! Failed to validate the SSL certificate for localhost:443
Most probably it's the postgresql-jdbc issue. Let's see if the package can be removed (or newer version generated). Best Regards,Strahil Nikolov On Sat, Apr 30, 2022 at 22:29, Strahil Nikolov via Users wrote: ___ Users mailing list -- users@ovirt.org To unsubscribe send an email to users-le...@ovirt.org Privacy Statement: https://www.ovirt.org/privacy-policy.html oVirt Code of Conduct: https://www.ovirt.org/community/about/community-guidelines/ List Archives: https://lists.ovirt.org/archives/list/users@ovirt.org/message/PGWXWWIR5BPJRRVZ63BEHHS2L65BJ44B/ ___ Users mailing list -- users@ovirt.org To unsubscribe send an email to users-le...@ovirt.org Privacy Statement: https://www.ovirt.org/privacy-policy.html oVirt Code of Conduct: https://www.ovirt.org/community/about/community-guidelines/ List Archives: https://lists.ovirt.org/archives/list/users@ovirt.org/message/Z3AGTHWNZUSMZZOBCW6VH4SWUU7HIYTI/
[ovirt-users] Re: HELP ME! Failed to validate the SSL certificate for localhost:443
Hm...then everything should be fine.You specified the FQDN, the FQDN has a valid A/ record and that IP has a valid PTR record. Best Regards,Strahil Nikolov On Sat, Apr 30, 2022 at 17:58, Tnchawy wrote: ___ Users mailing list -- users@ovirt.org To unsubscribe send an email to users-le...@ovirt.org Privacy Statement: https://www.ovirt.org/privacy-policy.html oVirt Code of Conduct: https://www.ovirt.org/community/about/community-guidelines/ List Archives: https://lists.ovirt.org/archives/list/users@ovirt.org/message/R5VUHRCD43TKAPA7FZ7FWIKE6JCCKXVD/ ___ Users mailing list -- users@ovirt.org To unsubscribe send an email to users-le...@ovirt.org Privacy Statement: https://www.ovirt.org/privacy-policy.html oVirt Code of Conduct: https://www.ovirt.org/community/about/community-guidelines/ List Archives: https://lists.ovirt.org/archives/list/users@ovirt.org/message/PGWXWWIR5BPJRRVZ63BEHHS2L65BJ44B/
[ovirt-users] Re: HELP ME! Failed to validate the SSL certificate for localhost:443
I set the FQDN name every time run "hosted-engine --deploy"
and I want to install self-host engine.
*I set up the servers as pictured below:*
[image: image.png]
[image: image.png]
ในวันที่ ส. 30 เม.ย. 2022 เวลา 17:03 Patrick Hibbs
เขียนว่า:
> >[ERROR] fatal:[localhost -> my_fqdn.domain]:FAILED!=>{"attempts":12,
> >"changed":false,"msg":"Failed to validate the SSL certificate for
> >localhost:443.
> >Make sure your managed systems have a valid CA certificate installed.
>
> Given that this seems to be an error from engine-setup, you've probably
> answered "localhost" when it asked you for the Host FQDN. Run engine-
> cleanup and then rerun engine-setup and give it the host's actual FQDN
> when engine-setup asks for it. (Typing localhost won't resolve it. You
> must give engine-setup the actual FQDN you want the engine to use.)
>
> -Patrick Hibbs
>
> On Sat, 2022-04-30 at 02:35 +, natchaw...@gmail.com wrote:
> > My records on the DNS server are as follows. When I check with
> > nslookup, there is no
> > access problem.
> >
> > i'm not use localhost.
> >
> > =
> >
> > Forward Lookup Zones
> > domain.co.th
> > gateway-node.doamin.co.th. IN A 10.99.101.90
> > manage-node.doamin.co.th. IN A 10.99.101.111
> >
> > Reverse Lookup Zones
> > 10.99.101.in-addr.arpa
> > 10.99.101.90 IN PTR gateway-node.doamin.co.th.
> > 10.99.101.111 IN PTR manage-node.doamin.co.th.
> > =
> >
> > What exactly is the problem that needs to be solved?
> > ___
> > Users mailing list -- users@ovirt.org
> > To unsubscribe send an email to users-le...@ovirt.org
> > Privacy Statement: https://www.ovirt.org/privacy-policy.html
> > oVirt Code of Conduct:
> > https://www.ovirt.org/community/about/community-guidelines/
> > List Archives:
> >
> https://lists.ovirt.org/archives/list/users@ovirt.org/message/P7KQVKBEHEAUNXT2H43ZTS32KCARXAWE/
>
> ___
> Users mailing list -- users@ovirt.org
> To unsubscribe send an email to users-le...@ovirt.org
> Privacy Statement: https://www.ovirt.org/privacy-policy.html
> oVirt Code of Conduct:
> https://www.ovirt.org/community/about/community-guidelines/
> List Archives:
> https://lists.ovirt.org/archives/list/users@ovirt.org/message/FKEFAG5L2JJ4TFN6CEBOVB4OKTU2FQBW/
>
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct:
https://www.ovirt.org/community/about/community-guidelines/
List Archives:
https://lists.ovirt.org/archives/list/users@ovirt.org/message/R5VUHRCD43TKAPA7FZ7FWIKE6JCCKXVD/
[ovirt-users] Re: HELP ME! Failed to validate the SSL certificate for localhost:443
>[ERROR] fatal:[localhost -> my_fqdn.domain]:FAILED!=>{"attempts":12,
>"changed":false,"msg":"Failed to validate the SSL certificate for
>localhost:443.
>Make sure your managed systems have a valid CA certificate installed.
Given that this seems to be an error from engine-setup, you've probably
answered "localhost" when it asked you for the Host FQDN. Run engine-
cleanup and then rerun engine-setup and give it the host's actual FQDN
when engine-setup asks for it. (Typing localhost won't resolve it. You
must give engine-setup the actual FQDN you want the engine to use.)
-Patrick Hibbs
On Sat, 2022-04-30 at 02:35 +, natchaw...@gmail.com wrote:
> My records on the DNS server are as follows. When I check with
> nslookup, there is no
> access problem.
>
> i'm not use localhost.
>
> =
>
> Forward Lookup Zones
> domain.co.th
> gateway-node.doamin.co.th. IN A 10.99.101.90
> manage-node.doamin.co.th. IN A 10.99.101.111
>
> Reverse Lookup Zones
> 10.99.101.in-addr.arpa
> 10.99.101.90 IN PTR gateway-node.doamin.co.th.
> 10.99.101.111 IN PTR manage-node.doamin.co.th.
> =
>
> What exactly is the problem that needs to be solved?
> ___
> Users mailing list -- users@ovirt.org
> To unsubscribe send an email to users-le...@ovirt.org
> Privacy Statement: https://www.ovirt.org/privacy-policy.html
> oVirt Code of Conduct:
> https://www.ovirt.org/community/about/community-guidelines/
> List Archives:
> https://lists.ovirt.org/archives/list/users@ovirt.org/message/P7KQVKBEHEAUNXT2H43ZTS32KCARXAWE/
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct:
https://www.ovirt.org/community/about/community-guidelines/
List Archives:
https://lists.ovirt.org/archives/list/users@ovirt.org/message/FKEFAG5L2JJ4TFN6CEBOVB4OKTU2FQBW/
[ovirt-users] Re: HELP ME! Failed to validate the SSL certificate for localhost:443
My records on the DNS server are as follows. When I check with nslookup, there is no access problem. i'm not use localhost. = Forward Lookup Zones domain.co.th gateway-node.doamin.co.th. IN A 10.99.101.90 manage-node.doamin.co.th. IN A 10.99.101.111 Reverse Lookup Zones 10.99.101.in-addr.arpa 10.99.101.90 IN PTR gateway-node.doamin.co.th. 10.99.101.111 IN PTR manage-node.doamin.co.th. = What exactly is the problem that needs to be solved? ___ Users mailing list -- users@ovirt.org To unsubscribe send an email to users-le...@ovirt.org Privacy Statement: https://www.ovirt.org/privacy-policy.html oVirt Code of Conduct: https://www.ovirt.org/community/about/community-guidelines/ List Archives: https://lists.ovirt.org/archives/list/users@ovirt.org/message/P7KQVKBEHEAUNXT2H43ZTS32KCARXAWE/
[ovirt-users] Re: HELP ME! Failed to validate the SSL certificate for localhost:443
You must not use localhost.Check A/ and PTR records for the engine.
Best Regards,Strahil Nikolov
Hi,
I'm having an issue with Failed to validate the SSL certificate for
localhost:443 during Deploy "hosted-engine."
check the log files, found this error:
"
[TASK] [ovirt.engine-setup: Check if Engine health page is up]
[ERROR] fatal:[localhost -> my_fqdn.domain]:FAILED!=>{"attempts":12,
"changed":false,"msg":"Failed to validate the SSL certificate for localhost:443.
Make sure your managed systems have a valid CA certificate installed.
You can use validate_certs=False if you do not need to confirm the servers
identity but this is unsafe and not recommended.
Paths checked for this patform: /etc/ssl/certs,
/etc/pki/ca-trust/extracted/pem, /etc/pki/tls/certs,
/usr/share/ca-certificates/cacert.org, /etc/ansible.
The exception msg was: [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify
failed (_ssl.c:618).", "status": -1, "url":
"http://localhost/ovirt-engine/services/health"}
"
NOTE: ovirt engine VERSION
"ovirt-engine-appliance-4.3-20200603.1.0.2.el7.x86_64"
We tried googling to resolve this issue but, unfortunately, unsuccessfully.
Can someone help us to solve our critical issue?
Best regards,
Bunnatee
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct:
https://www.ovirt.org/community/about/community-guidelines/
List Archives:
https://lists.ovirt.org/archives/list/users@ovirt.org/message/C7PBGLZL5JRR7UVGTMSQ4VVGTQFGA4RD/
___
Users mailing list -- users@ovirt.org
To unsubscribe send an email to users-le...@ovirt.org
Privacy Statement: https://www.ovirt.org/privacy-policy.html
oVirt Code of Conduct:
https://www.ovirt.org/community/about/community-guidelines/
List Archives:
https://lists.ovirt.org/archives/list/users@ovirt.org/message/E6F5RMSCEGGIUYPVCRCQ6KFMGJESSIPL/
