Neil, You checked both nodes what about the engine? Can you check engine certs? You can find more info where they are located here [1].
Thanks, Piotr [1] https://www.ovirt.org/develop/release-management/features/infra/pki/#ovirt-engine On Thu, Sep 21, 2017 at 3:26 PM, Neil <nwilson...@gmail.com> wrote: > Hi guys, > > Please could someone assist, my cluster is down and I can't access my vm's > to switch some of them back on. > > I'm seeing the following error in the engine.log however I've checked my > certs on my hosts (as some of the goolge results said to check), but the > certs haven't expired... > > > 2017-09-21 15:09:45,077 ERROR > [org.ovirt.engine.core.vdsbroker.vdsbroker.GetCapabilitiesVDSCommand] > (DefaultQuartzScheduler_Worker-4) Command GetCapabilitiesVDSCommand(HostName > = node02.mydomain.za, HostId = d2debdfe-76e7-40cf-a7fd-78a0f50f14d4, > vds=Host[node02.mydomain.za]) execution failed. Exception: > VDSNetworkException: javax.net.ssl.SSLHandshakeException: Received fatal > alert: certificate_expired > 2017-09-21 15:09:45,086 ERROR > [org.ovirt.engine.core.vdsbroker.vdsbroker.GetCapabilitiesVDSCommand] > (DefaultQuartzScheduler_Worker-10) Command > GetCapabilitiesVDSCommand(HostName = node01.mydomain.za, HostId = > b108549c-1700-11e2-b936-9f5243b8ce13, vds=Host[node01.mydomain.za]) > execution failed. Exception: VDSNetworkException: > javax.net.ssl.SSLHandshakeException: Received fatal alert: > certificate_expired > 2017-09-21 15:09:48,173 ERROR > > My engine and host info is below... > > [root@engine01 ovirt-engine]# rpm -qa | grep -i ovirt > ovirt-engine-lib-3.4.0-1.el6.noarch > ovirt-engine-restapi-3.4.0-1.el6.noarch > ovirt-engine-setup-plugin-ovirt-engine-3.4.0-1.el6.noarch > ovirt-engine-3.4.0-1.el6.noarch > ovirt-engine-setup-plugin-websocket-proxy-3.4.0-1.el6.noarch > ovirt-host-deploy-java-1.2.0-1.el6.noarch > ovirt-engine-setup-3.4.0-1.el6.noarch > ovirt-host-deploy-1.2.0-1.el6.noarch > ovirt-engine-backend-3.4.0-1.el6.noarch > ovirt-image-uploader-3.4.0-1.el6.noarch > ovirt-engine-tools-3.4.0-1.el6.noarch > ovirt-engine-sdk-python-3.4.0.7-1.el6.noarch > ovirt-engine-webadmin-portal-3.4.0-1.el6.noarch > ovirt-engine-cli-3.4.0.5-1.el6.noarch > ovirt-engine-setup-base-3.4.0-1.el6.noarch > ovirt-iso-uploader-3.4.0-1.el6.noarch > ovirt-engine-userportal-3.4.0-1.el6.noarch > ovirt-log-collector-3.4.1-1.el6.noarch > ovirt-engine-websocket-proxy-3.4.0-1.el6.noarch > ovirt-engine-setup-plugin-ovirt-engine-common-3.4.0-1.el6.noarch > ovirt-engine-dbscripts-3.4.0-1.el6.noarch > [root@engine01 ovirt-engine]# cat /etc/redhat-release > CentOS release 6.5 (Final) > > > [root@node02 ~]# openssl x509 -in /etc/pki/vdsm/certs/vdsmcert.pem -enddate > -noout ; date > notAfter=May 27 08:36:17 2019 GMT > Thu Sep 21 15:18:22 SAST 2017 > CentOS release 6.5 (Final) > [root@node02 ~]# rpm -qa | grep vdsm > vdsm-4.14.6-0.el6.x86_64 > vdsm-python-4.14.6-0.el6.x86_64 > vdsm-cli-4.14.6-0.el6.noarch > vdsm-xmlrpc-4.14.6-0.el6.noarch > vdsm-python-zombiereaper-4.14.6-0.el6.noarch > > > [root@node01 ~]# openssl x509 -in /etc/pki/vdsm/certs/vdsmcert.pem -enddate > -noout ; date > notAfter=Jun 13 16:09:41 2018 GMT > Thu Sep 21 15:18:52 SAST 2017 > CentOS release 6.5 (Final) > [root@node01 ~]# rpm -qa | grep -i vdsm > vdsm-4.14.6-0.el6.x86_64 > vdsm-xmlrpc-4.14.6-0.el6.noarch > vdsm-cli-4.14.6-0.el6.noarch > vdsm-python-zombiereaper-4.14.6-0.el6.noarch > vdsm-python-4.14.6-0.el6.x86_64 > > Please could I have some assistance, I'm rater desperate. > > Thank you. > > Regards. > > Neil Wilson > > > > _______________________________________________ > Users mailing list > Users@ovirt.org > http://lists.ovirt.org/mailman/listinfo/users > _______________________________________________ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
