Bug 1048727

We decided the problem was the vm running sam, not in fact candlepin.

I'm not sure why it was so slow, perhaps no visualization support turned on?  If the issue can be reproduced, feel free to reopen.

This request was not resolved in time for the current release.
Red Hat invites you to ask your support representative to
propose this request, if still desired, for consideration in
the next release of Red Hat Enterprise Linux.

Our team has hit this problem on a RHEL-7 VM several times, it appears to be intermittent.

"Unable to verify server's identity: timed out
Error trying to auto attach pool"


subscription-manager-1.10.14-7.el7.x86_64


2015-03-25 19:13:20,864 [DEBUG] subscription-manager @cache.py:290 - Started thread to write cache: /var/lib/rhsm/cache/content_overrides.json
2015-03-25 19:13:20,866 [DEBUG] subscription-manager @connection.py:418 - Loaded CA certificates from /etc/rhsm/ca/: candlepin-stage.pem, redhat-uep.pem
2015-03-25 19:13:20,867 [DEBUG] subscription-manager @connection.py:450 - Making request: GET /subscription/consumers/8adac238-17e0-4689-b3fb-d999c90bc785/release
2015-03-25 19:13:22,812 [DEBUG] subscription-manager @connection.py:473 - Response: status=200
2015-03-25 19:13:22,814 [INFO] subscription-manager @repolib.py:193 - repos updated: 0
2015-03-25 19:13:22,839 [DEBUG] subscription-manager @hwprobe.py:554 - cpu info: {'cpu.cpu(s)': 2, 'cpu.core(s)_per_socket': 1, 'cpu.thread(s)_per_core': 1, 'cpu.topology_source': 'kernel /sys cpu sibling lists', 'cpu.cpu_socket(s)': 2}
2015-03-25 19:13:22,847 [DEBUG] subscription-manager @hwprobe.py:773 - Running 'virt-what'
2015-03-25 19:13:22,875 [DEBUG] subscription-manager @hwprobe.py:777 - virt-what stdout: kvm

2015-03-25 19:13:22,875 [DEBUG] subscription-manager @hwprobe.py:778 - virt-what stderr: 
2015-03-25 19:13:22,875 [INFO] subscription-manager @hwprobe.py:766 - virt.is_guest: True
2015-03-25 19:13:22,875 [INFO] subscription-manager @hwprobe.py:767 - virt.host_type: kvm
2015-03-25 19:13:22,885 [INFO] subscription-manager @hwprobe.py:822 - virt.uuid: d10e44c5-e679-4dbd-8091-8a4213dfb2d1
2015-03-25 19:13:22,886 [INFO] subscription-manager @factlib.py:57 - Facts have not changed, skipping upload.
2015-03-25 19:13:22,887 [INFO] subscription-manager @cache.py:374 - Server does not support packages, skipping profile upload.
2015-03-25 19:13:22,890 [INFO] subscription-manager @cache.py:169 - Checking current system info against cache: /var/lib/rhsm/cache/installed_products.json
2015-03-25 19:13:22,890 [INFO] subscription-manager @cache.py:186 - No changes.
2015-03-25 19:13:22,891 [DEBUG] subscription-manager @connection.py:418 - Loaded CA certificates from /etc/rhsm/ca/: candlepin-stage.pem, redhat-uep.pem
2015-03-25 19:13:22,892 [DEBUG] subscription-manager @connection.py:450 - Making request: POST /subscription/consumers/8adac238-17e0-4689-b3fb-d999c90bc785/entitlements?pool=8a85f9823e3d5e43013e3ddd4e2a0977
2015-03-25 19:14:25,322 [ERROR] subscription-manager @managercli.py:156 - Unable to attach: timed out
2015-03-25 19:14:25,323 [ERROR] subscription-manager @managercli.py:157 - timed out
Traceback (most recent call last):
  File "/usr/share/rhsm/subscription_manager/managercli.py", line 1391, in _do_command
    ents = self.cp.bindByEntitlementPool(consumer_uuid, pool, self.options.quantity)
  File "/usr/lib64/python2.7/site-packages/rhsm/connection.py", line 925, in bindByEntitlementPool
    return self.conn.request_post(method)
  File "/usr/lib64/python2.7/site-packages/rhsm/connection.py", line 557, in request_post
    return self._request("POST", method, params)
  File "/usr/lib64/python2.7/site-packages/rhsm/connection.py", line 464, in _request
    response = conn.getresponse()
  File "/usr/lib64/python2.7/httplib.py", line 1045, in getresponse
    response.begin()
  File "/usr/lib64/python2.7/httplib.py", line 409, in begin
    version, status, reason = self._read_status()
  File "/usr/lib64/python2.7/httplib.py", line 365, in _read_status
    line = self.fp.readline(_MAXLINE + 1)
  File "/usr/lib64/python2.7/socket.py", line 476, in readline
    data = self._sock.recv(self._rbufsize)
  File "/usr/lib64/python2.7/site-packages/M2Crypto/SSL/Connection.py", line 228, in read
    return self._read_bio(size)
  File "/usr/lib64/python2.7/site-packages/M2Crypto/SSL/Connection.py", line 213, in _read_bio
    return m2.ssl_read(self.ssl, size, self._timeout)
SSLTimeoutError: timed out

As long as client is handling this gracefully, it's mostly NOTABUG, but the exception message that gets shown on SSLError's isn't particularly accurate.

ie, "Unable to verify server's identity: _the_ssl_error_msg"


TODO:
  - add a more specific message for SSLTimeoutError
  - make the default "SSLError" message more generic
  - figure out where/why the current msg makes sense and hopefully
    hook it to a more specific exception

Adrian, what do you want to do with this low severity bug?  Sounds like you have an idea to be implemented.

After triage, we decided that the "Unable to verify server's identity: timed out
" message is sufficient.

The needinfo request[s] on this closed bug have been removed as they have been unresolved for 1000 days