Bug 1223826

Summary: rhevm-setup - update - pki: Enroll certs on upgrade if not exist
Product: Red Hat Enterprise Virtualization Manager Reporter: Pavel Stehlik <pstehlik>
Component: ovirt-engineAssignee: Yedidyah Bar David <didi>
Status: CLOSED CURRENTRELEASE QA Contact: Gonza <grafuls>
Severity: urgent Docs Contact:
Priority: unspecified    
Version: unspecifiedCC: bazulay, gklein, lsurette, pstehlik, rbalakri, Rhev-m-bugs, sbonazzo, yeylon, ykaul, ylavi
Target Milestone: ovirt-3.6.0-rcKeywords: Regression, ZStream
Target Release: 3.6.0   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of:
: 1224656 (view as bug list) Environment:
Last Closed: 2016-03-11 07:29:01 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: Integration RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On: 1080542    
Bug Blocks: 1224656    

Description Pavel Stehlik 2015-05-21 13:44:01 UTC
Description of problem:
 When updating 3.5.1 to 3.5.3 rhevm (and it's upgraded from 3.4 or older) will fail with:
...
2015-05-21 10:55:08 DEBUG otopi.context context.dumpEnvironment:500 ENV OVESETUP_CORE_MODIFIED_LINES_GROUP/ca_pki=dict:'{}'
2015-05-21 10:55:08 DEBUG otopi.context context.dumpEnvironment:500 ENV OVESETUP_DB/connection=NoneType:'None'
?ERROR
    x509 = self._extractPKCS12Certificate(pkcs12)
  File "/usr/share/ovirt-engine/setup/bin/../plugins/ovirt-engine-setup/ovirt-engine/pki/ca.py", line 107, in _extractPKCS12Certificate
    self._extractPKCS12CertificateString(pkcs12)
  File "/usr/share/ovirt-engine/setup/bin/../plugins/ovirt-engine-setup/ovirt-engine/pki/ca.py", line 99, in _extractPKCS12CertificateString
    '-nokeys',
  File "/usr/lib/python2.6/site-packages/otopi/plugin.py", line 871, in execute
    self.logger.debug(
RuntimeError: Command '/usr/bin/openssl' failed to execute
2015-05-21 10:53:42 ERROR otopi.context context._executeMethod:161 Failed to execute stage 'Misc configuration': Command '/usr/bin/openssl' failed to execute
2015-05-21 10:53:42 DEBUG otopi.transaction transaction.abort:131 aborting 'Yum Transaction'
...

Version-Release number of selected component (if applicable):
rhevm-setup-3.5.3-0.2.el6ev.noarch

How reproducible:
100%

Steps to Reproduce:
1. have 3.5 which was updated from 3.4 already
2. have 3.5
3. yum update rhevm-setup rhevm-dwh-setup rhevm-reports-setup
4. rhevm-setup

Actual results:


Expected results:


Additional info:
There is already patch available https://gerrit.ovirt.org/#/c/41264/

Comment 3 Alon Bar-Lev 2015-05-21 18:03:53 UTC
it would be great if we stop opening downstream bugs for a component that is not downstream specific nor packaging specific.

Comment 8 Alon Bar-Lev 2015-06-01 07:48:56 UTC
wrong component: should not be ovirt-engine-config, please move and handle acks.

Comment 10 Max Kovgan 2015-06-28 14:13:08 UTC
ovirt-3.6.0-3 release

Comment 11 Gonza 2015-07-07 10:16:07 UTC
Verified with the following:

ovirt-engine-3.4.4-1.el6.noarch
ovirt-engine-dwh-3.4.4-0.1.el6.noarch
ovirt-engine-reports-3.4.4-0.1.el6.noarch

# ls -l /etc/pki/ovirt-engine/*/*reports*
ls: cannot access /etc/pki/ovirt-engine/*/*reports*: No such file or directory

*** Upgraded to 3.5 ***

ovirt-engine-3.5.3.1-1.el6.noarch
ovirt-engine-dwh-3.5.3-1.el6.noarch
ovirt-engine-reports-3.5.3-1.el6.noarch

# ls -l /etc/pki/ovirt-engine/*/*reports*
ls: cannot access /etc/pki/ovirt-engine/*/*reports*: No such file or directory

*** Upgraded to 3.6 ***

ovirt-engine-3.6.0-0.0.master.20150627185750.git6f063c1.el6.noarch
ovirt-engine-dwh-3.6.0-0.0.master.20150617151108.20150617150804.gitfccbb7a.el6.noarch
ovirt-engine-reports-3.6.0-0.0.master.20150624094644.20150624094424.git019fd83.el6.noarch

# ls -l /etc/pki/ovirt-engine/*/*reports*
-rw-r--r--. 1 root root 1793 Jul  3 17:48 /etc/pki/ovirt-engine/certs/reports.cer
-rw-r--r--. 1 root root 5114 Jul  3 17:48 /etc/pki/ovirt-engine/certs/reports.cer.20150703174827
-rw-------. 1 root root 1828 Jul  3 17:48 /etc/pki/ovirt-engine/keys/reports.key.nopass
-rw-------. 1 root root 2733 Jul  3 17:48 /etc/pki/ovirt-engine/keys/reports.p12
-rw-r--r--. 1 root root  863 Jul  3 17:48 /etc/pki/ovirt-engine/requests/reports.req