Bug 1711036

New commit detected on ManageIQ/manageiq/hammer:

https://github.com/ManageIQ/manageiq/commit/836f43ebf98c17120465dfe518c47ebf88b6ce7d
commit 836f43ebf98c17120465dfe518c47ebf88b6ce7d
Author:     Adam Grare <agrare>
AuthorDate: Thu May 16 10:58:49 2019 -0400
Commit:     Adam Grare <agrare>
CommitDate: Thu May 16 10:58:49 2019 -0400

    Merge pull request #18762 from fdupont-redhat/v2v_conversion_host_handle_cacert_from_ui

    [V2V] Conversion Host - Handle CA bundle from UI

    (cherry picked from commit d3248d61d29d109f481818ed78dec5e87b6cba6f)

    https://bugzilla.redhat.com/show_bug.cgi?id=1711036

 app/models/conversion_host.rb | 4 +-
 app/models/conversion_host/configurations.rb | 4 +-
 spec/models/conversion_host_spec.rb | 5 +-
 3 files changed, 8 insertions(+), 5 deletions(-)

New commit detected on ManageIQ/manageiq-v2v/hammer:

https://github.com/ManageIQ/manageiq-v2v/commit/c0e7bc8bc78c392f7af066562061c9ed7b84c660
commit c0e7bc8bc78c392f7af066562061c9ed7b84c660
Author:     Milan Zázrivec <mzazrivec>
AuthorDate: Wed May 15 04:42:01 2019 -0400
Commit:     Milan Zázrivec <mzazrivec>
CommitDate: Wed May 15 04:42:01 2019 -0400

    Merge pull request #952 from mturley/951-conv-host-ssl-field

    [#951] [BZ#1708359] Add OpenStack Trusted CA Certificates field to Conversion Host Wizard

    (cherry picked from commit 69c987b116af3094c20b073ef564a7ea7a88c282)

    Fixes https://bugzilla.redhat.com/show_bug.cgi?id=1711036

 app/javascript/react/screens/App/Settings/screens/ConversionHostsSettings/components/ConversionHostWizard/ConversionHostWizardAuthenticationStep/ConversionHostWizardAuthenticationStep.js | 54 +-
 app/javascript/react/screens/App/Settings/screens/ConversionHostsSettings/components/ConversionHostWizard/ConversionHostWizardAuthenticationStep/index.js | 3 +-
 app/javascript/react/screens/App/Settings/screens/ConversionHostsSettings/components/ConversionHostWizard/ConversionHostWizardResultsStep/helpers.js | 1 +
 app/javascript/react/screens/App/Settings/screens/ConversionHostsSettings/components/RetryConversionHostConfirmationModal/RetryConversionHostConfirmationModal.js | 8 +-
 app/javascript/react/screens/App/common/forms/SshKeyField.js | 30 -
 app/javascript/react/screens/App/common/forms/TextFileField.js | 32 +
 app/javascript/react/screens/App/common/forms/TextFileInput/TextFileInput.js | 31 +-
 app/javascript/react/screens/App/common/forms/TextFileInput/TextFileInput.scss | 2 +-
 8 files changed, 110 insertions(+), 51 deletions(-)

Earlier to enable SSL connection, we were adding overcloud and undercloud certs to /etc/pki/ca-trust/source/anchors dir of ManageIQ.
Now, I am trying to understand what should be the usecase if we add overcloud cert to 'verify TLS' option..


I have added OSP in 'SSL without validation' and tried with and without adding overcloud cert in new 'verify TLS' option but migration still failing with similar error

```
Failed to discover available identity versions when contacting https://10.8.58.137:13000/v3. Attempting to parse version from URL.
SSL exception connecting to https://10.8.58.137:13000/v3/auth/tokens: [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:618)
```

is it expected? can't we run migration with 'SSL without validation'? should I try it by adding SSL while adding OSP and ignoring TLS?

OSP with VDDK + SSL without validation + TLS works totally fine.
We have used ca-chain to import certs as a TLS.
Thanks to fabien for steps and confirmation.

Verifying BZ, more info on Comment #4 and Comment #6.
CFME: 5.10.5.0

Using openstack TLS for conversion appliance configuration
https://mojo.redhat.com/docs/DOC-1198846-v2v-using-openstack-tls-for-conversion-appliance-configuration

Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHSA-2019:1429