Hello again, Community! We're trying to make use of DirectDownload templates which makes use of the "Bypass Secondary Storage" feature, but we seem to be having issues with this functionality.
After setting up a new template with "Direct Download" turned on and an HTTPS URL our template file won't download. The download source is a file stored in github. This is what we see in the logs: Jun 13 16:12:07 lax2-cs-hv01 java[26054]: WARN [kvm.storage.KVMStorageProcessor] (agentRequest-Handler-5:) (logid:7b08521c) Error downloading template 209 due to: Error on HTTPS request: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target Jun 13 16:12:07 lax2-cs-hv01 java[26054]: INFO [kvm.storage.LibvirtStorageAdaptor] (agentRequest-Handler-1:) (logid:7b08521c) Trying to fetch storage pool 3b59a095-9e71-3e97-92a8-56aa3f931a5e from libvirt Jun 13 16:12:07 lax2-cs-hv01 java[26054]: WARN [kvm.storage.KVMStorageProcessor] (agentRequest-Handler-1:) (logid:7b08521c) Error downloading template 209 due to: Error on HTTPS request: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target Jun 13 16:12:07 lax2-cs-hv01 java[26054]: INFO [kvm.storage.LibvirtStorageAdaptor] (agentRequest-Handler-4:) (logid:78a6fa93) Trying to fetch storage pool 3b59a095-9e71-3e97-92a8-56aa3f931a5e from libvirt Jun 13 16:12:07 lax2-cs-hv01 java[26054]: INFO [kvm.storage.LibvirtStorageAdaptor] (agentRequest-Handler-4:) (logid:78a6fa93) Asking libvirt to refresh storage pool 3b59a095-9e71-3e97-92a8-56aa3f931a5e Jun 13 16:12:07 lax2-cs-hv01 java[26054]: INFO [kvm.storage.LibvirtStorageAdaptor] (agentRequest-Handler-2:) (logid:7b08521c) Trying to fetch storage pool 3b59a095-9e71-3e97-92a8-56aa3f931a5e from libvirt Jun 13 16:12:08 lax2-cs-hv01 java[26054]: INFO [kvm.storage.LibvirtStorageAdaptor] (agentRequest-Handler-3:) (logid:78a6fa93) Trying to fetch storage pool eb9f16ef-3ba3-4c50-9e64-807b6f2c8994 from libvirt Jun 13 16:12:08 lax2-cs-hv01 java[26054]: INFO [kvm.storage.LibvirtStorageAdaptor] (agentRequest-Handler-3:) (logid:78a6fa93) Asking libvirt to refresh storage pool eb9f16ef-3ba3-4c50-9e64-807b6f2c8994 Jun 13 16:12:08 lax2-cs-hv01 java[26054]: WARN [kvm.storage.KVMStorageProcessor] (agentRequest-Handler-2:) (logid:7b08521c) Error downloading template 209 due to: Error on HTTPS request: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target We've been through this documentation: https://docs.cloudstack.apache.org/en/latest/adminguide/hosts.html#securing-process but everything seems to be in order, on our side. Any insights here? Happy to provide any logs or configuration information to assist. Regards, Willard Conrad DevOps Engineer Hivelocity, LLC
