Thank you, i solved it by copying the websocket-proxy cert/key-pair.
Bye Am 24.08.2016 um 22:15 schrieb Yedidyah Bar David: > On Wed, Aug 24, 2016 at 9:57 PM, Ralf Schenk <r...@databay.de > <mailto:r...@databay.de>> wrote: > > Hello List, > > After upgrading ovirt-hosted-engine setup failed with "Failed to > start service 'ovirt-imageio-proxy'". > > If try to start it manually via > > journalctl -xe shows following error: > Aug 24 20:51:10 engine.mydomain.local ovirt-imageio-proxy[7635]: > self._secure_server(config, server) > Aug 24 20:51:10 engine.mydomain.local ovirt-imageio-proxy[7635]: > File > "/usr/lib/python2.7/site-packages/ovirt_imageio_proxy/server.py", line > Aug 24 20:51:10 engine.mydomain.local ovirt-imageio-proxy[7635]: > server_side=True) > Aug 24 20:51:10 engine.mydomain.local ovirt-imageio-proxy[7635]: > File "/usr/lib64/python2.7/ssl.py", line 913, in wrap_socket > Aug 24 20:51:10 engine.mydomain.local ovirt-imageio-proxy[7635]: > ciphers=ciphers) > Aug 24 20:51:10 engine.mydomain.local ovirt-imageio-proxy[7635]: > File "/usr/lib64/python2.7/ssl.py", line 526, in __init__ > Aug 24 20:51:10 engine.mydomain.local ovirt-imageio-proxy[7635]: > self._context.load_cert_chain(certfile, keyfile) > Aug 24 20:51:10 engine.mydomain.local ovirt-imageio-proxy[7635]: > IOError: [Errno 2] No such file or directory > Aug 24 20:51:10 engine.mydomain.local systemd[1]: > ovirt-imageio-proxy.service: main process exited, code=exited, > status=1/FAILURE > Aug 24 20:51:10 engine.mydomain.local systemd[1]: Failed to start > oVirt ImageIO Proxy. > > Config (/etc/ovirt-imageio-proxy/ovirt-imageio-proxy.conf) points > to a non-existing cert > /etc/pki/ovirt-engine/certs/imageio-proxy.cer > and nonexisting key: > /etc/pki/ovirt-engine/keys/imageio-proxy.key.nopass > > > Right, will be fixed in 4.0.3: > > https://bugzilla.redhat.com/show_bug.cgi?id=1365451 > > > > How to generate a correct cert and key for correct startup ? > > > There is no simple single one-liner to do that for now. > > Search for "pki-enroll-pkcs12.sh" for examples if you really want to. > > You can copy e.g. websocket-proxy key/cert. > > You can use the 4.0 nightly repo - bugs in MODIFIED are already fixed > there: > > http://www.ovirt.org/develop/dev-process/install-nightly-snapshot/ > > You can answer 'no' to 'configure image i/o proxy?', if you don't need it. > It's only needed for the new image uploader: > > http://www.ovirt.org/develop/release-management/features/storage/image-upload/ > > Or you can wait for 4.0.3. > > Best, > > > > Bye > -- > > > *Ralf Schenk* > fon +49 (0) 24 05 / 40 83 70 > <tel:%2B49%20%280%29%2024%2005%20%2F%2040%2083%2070> > fax +49 (0) 24 05 / 40 83 759 > <tel:%2B49%20%280%29%2024%2005%20%2F%2040%2083%20759> > mail *r...@databay.de* <mailto:r...@databay.de> > > *Databay AG* > Jens-Otto-Krag-Straße 11 > D-52146 Würselen > *www.databay.de* <http://www.databay.de> > > Sitz/Amtsgericht Aachen • HRB:8437 • USt-IdNr.: DE 210844202 > Vorstand: Ralf Schenk, Dipl.-Ing. Jens Conze, Aresch Yavari, > Dipl.-Kfm. Philipp Hermanns > Aufsichtsratsvorsitzender: Klaus Scholzen (RA) > > ------------------------------------------------------------------------ > > _______________________________________________ > Users mailing list > Users@ovirt.org <mailto:Users@ovirt.org> > http://lists.ovirt.org/mailman/listinfo/users > <http://lists.ovirt.org/mailman/listinfo/users> > > > > > -- > Didi -- *Ralf Schenk* fon +49 (0) 24 05 / 40 83 70 fax +49 (0) 24 05 / 40 83 759 mail *r...@databay.de* <mailto:r...@databay.de> *Databay AG* Jens-Otto-Krag-Straße 11 D-52146 Würselen *www.databay.de* <http://www.databay.de> Sitz/Amtsgericht Aachen • HRB:8437 • USt-IdNr.: DE 210844202 Vorstand: Ralf Schenk, Dipl.-Ing. Jens Conze, Aresch Yavari, Dipl.-Kfm. Philipp Hermanns Aufsichtsratsvorsitzender: Wilhelm Dohmen ------------------------------------------------------------------------
_______________________________________________ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
