On Tuesday, 12 October 2021 07:53:46 CEST dhanaraj.ramesh--- via Users wrote: > Hi Team > > in one of the cluster infra, we are unable to upload the images or disks via > gui. up on checking the /var/log/ovirt-imageio/daemon.log found that > throwing ssl connection failure, help us to check what are we missing..
looks like certificate is not trusted (invalid/missing root certificates on given machine?) > We are using thirdparty CA approved SSL for web GUI.. did you try "Test connection" button on the upload page? If it fails, you need to download the certificate from [1] and make it trusted in your browser [1] https://$ENGINE_ADDRESS/ovirt-engine/services/pki-resource?resource=ca-certificate&format=X509-PEM-CA > 2021-10-11 22:45:42,812 INFO (Thread-6) [http] OPEN connection=6 > client=127.0.0.1 2021-10-11 22:45:42,812 INFO (Thread-6) [tickets] > [127.0.0.1] REMOVE ticket=f18cff91-1fc4-43b6-91ea-ca2a11d409a6 2021-10-11 > 22:45:42,813 INFO (Thread-6) [http] CLOSE connection=6 client=127.0.0.1 > [connection 1 ops, 0.000539 s] [dispatch 1 ops, 0.000216 s] 2021-10-11 > 22:45:43,621 INFO (Thread-4) [images] [::ffff:10.12.23.212] OPTIONS > ticket=53ff98f9-f429-4880-abe6-06c6c01473de 2021-10-11 22:45:43,621 INFO > (Thread-4) [backends.http] Open backend > netloc='renlovkvma01.test.lab:54322' > path='/images/53ff98f9-f429-4880-abe6-06c6c01473de' > cafile='/etc/pki/ovirt-engine/ca.pem' secure=True 2021-10-11 22:45:43,626 > ERROR (Thread-4) [http] Server error > Traceback (most recent call last): > File > "/usr/lib64/python3.6/site-packages/ovirt_imageio/_internal/backends/__init > __.py", line 66, in get return ticket.get_context(req.connection_id) > File "/usr/lib64/python3.6/site-packages/ovirt_imageio/_internal/auth.py", > line 146, in get_context return self._connections[con_id] > KeyError: 4 > > During handling of the above exception, another exception occurred: > > Traceback (most recent call last): > File "/usr/lib64/python3.6/site-packages/ovirt_imageio/_internal/http.py", > line 774, in __call__ self.dispatch(req, resp) > File "/usr/lib64/python3.6/site-packages/ovirt_imageio/_internal/http.py", > line 819, in dispatch return method(req, resp, *match.groups()) > File "/usr/lib64/python3.6/site-packages/ovirt_imageio/_internal/cors.py", > line 84, in wrapper return func(self, req, resp, *args) > File > "/usr/lib64/python3.6/site-packages/ovirt_imageio/_internal/images.py", > line 246, in options ctx = backends.get(req, ticket, self.config) > File > "/usr/lib64/python3.6/site-packages/ovirt_imageio/_internal/backends/__init > __.py", line 85, in get cafile=ca_file) > File > "/usr/lib64/python3.6/site-packages/ovirt_imageio/_internal/backends/http.p > y", line 48, in open return Backend(url, **options) > File > "/usr/lib64/python3.6/site-packages/ovirt_imageio/_internal/backends/http.p > y", line 76, in __init__ self._connect() > File > "/usr/lib64/python3.6/site-packages/ovirt_imageio/_internal/backends/http.p > y", line 117, in _connect self._con = self._create_tcp_connection() > File > "/usr/lib64/python3.6/site-packages/ovirt_imageio/_internal/backends/http.p > y", line 379, in _create_tcp_connection con.connect() > File "/usr/lib64/python3.6/http/client.py", line 1437, in connect > server_hostname=server_hostname) > File "/usr/lib64/python3.6/ssl.py", line 365, in wrap_socket > _context=self, _session=session) > File "/usr/lib64/python3.6/ssl.py", line 776, in __init__ > self.do_handshake() > File "/usr/lib64/python3.6/ssl.py", line 1036, in do_handshake > self._sslobj.do_handshake() > File "/usr/lib64/python3.6/ssl.py", line 648, in do_handshake > self._sslobj.do_handshake() > ssl.SSLError: [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed > (_ssl.c:897) _______________________________________________ > Users mailing list -- [email protected] > To unsubscribe send an email to [email protected] > Privacy Statement: https://www.ovirt.org/privacy-policy.html > oVirt Code of Conduct: > https://www.ovirt.org/community/about/community-guidelines/ List Archives: > https://lists.ovirt.org/archives/list/[email protected]/message/XMBNYE7E7C5XY > UKO6FARQQAHCT4HOYSJ/
signature.asc
Description: This is a digitally signed message part.
_______________________________________________ Users mailing list -- [email protected] To unsubscribe send an email to [email protected] Privacy Statement: https://www.ovirt.org/privacy-policy.html oVirt Code of Conduct: https://www.ovirt.org/community/about/community-guidelines/ List Archives: https://lists.ovirt.org/archives/list/[email protected]/message/ZANHCS7OZRS6MSHR7GF7LC62UJGP4F4O/
