Bug 1258585 - [engine] host cert about to expire is detected as already expired
Summary: [engine] host cert about to expire is detected as already expired
Keywords:
Status: CLOSED CURRENTRELEASE
Alias: None
Product: Red Hat Enterprise Virtualization Manager
Classification: Red Hat
Component: ovirt-engine
Version: 3.6.0
Hardware: Unspecified
OS: Unspecified
high
high
Target Milestone: ovirt-3.6.0-rc
: 3.6.0
Assignee: Moti Asayag
QA Contact: Jiri Belka
URL:
Whiteboard:
Depends On:
Blocks: 1188759
TreeView+ depends on / blocked
 
Reported: 2015-08-31 17:05 UTC by Jiri Belka
Modified: 2016-04-20 01:36 UTC (History)
7 users (show)

Fixed In Version: 3.6.0-12
Doc Type: Bug Fix
Doc Text:
Clone Of:
Environment:
Last Closed: 2016-04-20 01:36:44 UTC
oVirt Team: Infra
Target Upstream Version:
Embargoed:


Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
oVirt gerrit 45689 0 master MERGED engine: Log proper log type per expiration event 2020-07-13 08:29:19 UTC
oVirt gerrit 45690 0 ovirt-engine-3.6 MERGED engine: Log proper log type per expiration event 2020-07-13 08:29:19 UTC

Description Jiri Belka 2015-08-31 17:05:18 UTC
Description of problem:

probably similar issue as in BZ1257876

2020-08-04 18:58:02,909 ERROR [org.ovirt.engine.core.vdsbroker.vdsbroker.GetCapabilitiesVDSCommand] (DefaultQuartzScheduler_Worker-26) [] Command 'GetCapabilitiesVDSCommand(HostName = dell-r210ii-13.rhev.lab.eng.brq.redhat.com, VdsIdAndVdsVDSCommandParametersBase:{runAsync='true', hostId='eb400a81-e668-42ff-9752-59bef822f253', vds='Host[dell-r210ii-13.rhev.lab.eng.brq.redhat.com,eb400a81-e668-42ff-9752-59bef822f253]'})' execution failed: VDSGenericException: VDSNetworkException: Received fatal alert: certificate_expired
2020-08-04 18:58:02,909 ERROR [org.ovirt.engine.core.vdsbroker.HostMonitoring] (DefaultQuartzScheduler_Worker-26) [] Failure to refresh Vds runtime info: VDSGenericException: VDSNetworkException: Received fatal alert: certificate_expired
2020-08-04 18:58:02,909 ERROR [org.ovirt.engine.core.vdsbroker.HostMonitoring] (DefaultQuartzScheduler_Worker-26) [] Exception: org.ovirt.engine.core.vdsbroker.vdsbroker.VDSNetworkException: VDSGenericException: VDSNetworkException: Received fatal alert: certificate_expired
2020-08-04 18:58:02,920 WARN  [org.ovirt.engine.core.vdsbroker.VdsManager] (DefaultQuartzScheduler_Worker-26) [] Failed to refresh VDS, network error, continuing, vds='dell-r210ii-13.rhev.lab.eng.brq.redhat.com'(eb400a81-e668-42ff-9752-59bef822f253): VDSGenericException: VDSNetworkException: Received fatal alert: certificate_expired
2020-08-04 18:58:05,968 ERROR [org.ovirt.engine.core.vdsbroker.vdsbroker.GetAllVmStatsVDSCommand] (DefaultQuartzScheduler_Worker-35) [] Command 'GetAllVmStatsVDSCommand(HostName = dell-r210ii-13.rhev.lab.eng.brq.redhat.com, VdsIdAndVdsVDSCommandParametersBase:{runAsync='true', hostId='eb400a81-e668-42ff-9752-59bef822f253', vds='Host[dell-r210ii-13.rhev.lab.eng.brq.redhat.com,eb400a81-e668-42ff-9752-59bef822f253]'})' execution failed: VDSGenericException: VDSNetworkException: Received fatal alert: certificate_expired
2020-08-04 18:58:21,006 ERROR [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] (DefaultQuartzScheduler_Worker-47) [] Correlation ID: null, Call Stack: null, Custom Event ID: -1, Message: VDSM dell-r210ii-13.rhev.lab.eng.brq.redhat.com command failed: Received fatal alert: certificate_expired
2020-08-04 18:58:21,008 ERROR [org.ovirt.engine.core.vdsbroker.vdsbroker.GetCapabilitiesVDSCommand] (DefaultQuartzScheduler_Worker-47) [] Command 'GetCapabilitiesVDSCommand(HostName = dell-r210ii-13.rhev.lab.eng.brq.redhat.com, VdsIdAndVdsVDSCommandParametersBase:{runAsync='true', hostId='eb400a81-e668-42ff-9752-59bef822f253', vds='Host[dell-r210ii-13.rhev.lab.eng.brq.redhat.com,eb400a81-e668-42ff-9752-59bef822f253]'})' execution failed: VDSGenericException: VDSNetworkException: Received fatal alert: certificate_expired
2020-08-04 18:58:21,008 ERROR [org.ovirt.engine.core.vdsbroker.HostMonitoring] (DefaultQuartzScheduler_Worker-47) [] Failure to refresh Vds runtime info: VDSGenericException: VDSNetworkException: Received fatal alert: certificate_expired
2020-08-04 18:58:21,009 ERROR [org.ovirt.engine.core.vdsbroker.HostMonitoring] (DefaultQuartzScheduler_Worker-47) [] Exception: org.ovirt.engine.core.vdsbroker.vdsbroker.VDSNetworkException: VDSGenericException: VDSNetworkException: Received fatal alert: certificate_expired
2020-08-04 18:58:21,013 WARN  [org.ovirt.engine.core.vdsbroker.VdsManager] (DefaultQuartzScheduler_Worker-47) [] Failed to refresh VDS, network error, continuing, vds='dell-r210ii-13.rhev.lab.eng.brq.redhat.com'(eb400a81-e668-42ff-9752-59bef822f253): VDSGenericException: VDSNetworkException: Received fatal alert: certificate_expired
2020-08-04 18:58:21,066 INFO  [org.ovirt.engine.core.vdsbroker.VdsManager] (org.ovirt.thread.pool-7-thread-6) [] Server failed to respond, vds_id='eb400a81-e668-42ff-9752-59bef822f253', vds_name='dell-r210ii-13.rhev.lab.eng.brq.redhat.com', vm_count=0, spm_status='None', non-responsive_timeout (seconds)=60, error: VDSGenericException: VDSNetworkException: Received fatal alert: certificate_expired
2020-08-04 18:58:21,090 ERROR [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] (org.ovirt.thread.pool-7-thread-6) [] Correlation ID: null, Call Stack: org.ovirt.engine.core.vdsbroker.vdsbroker.VDSNetworkException: VDSGenericException: VDSNetworkException: Received fatal alert: certificate_expired
2020-08-04 18:58:24,048 ERROR [org.ovirt.engine.core.vdsbroker.vdsbroker.GetAllVmStatsVDSCommand] (DefaultQuartzScheduler_Worker-88) [] Command 'GetAllVmStatsVDSCommand(HostName = dell-r210ii-13.rhev.lab.eng.brq.redhat.com, VdsIdAndVdsVDSCommandParametersBase:{runAsync='true', hostId='eb400a81-e668-42ff-9752-59bef822f253', vds='Host[dell-r210ii-13.rhev.lab.eng.brq.redhat.com,eb400a81-e668-42ff-9752-59bef822f253]'})' execution failed: VDSGenericException: VDSNetworkException: Received fatal alert: certificate_expired
^C
[root@jb-bz1 ~]# date
Tue Aug  4 18:58:37 CEST 2020

but the cert is:

[root@dell-r210ii-13 ~]# openssl x509 -in /etc/pki/vdsm/certs/vdsmcert.pem -enddate -noout ; date
notAfter=Aug 29 16:36:25 2020 GMT
Tue Aug  4 19:00:57 CEST 2020


Version-Release number of selected component (if applicable):
rhevm-backend-3.6.0-0.12.master.el6.noarch

How reproducible:
100%

Steps to Reproduce:
1. have a host cert that is about to expire in < 30 days
2.
3.

Actual results:
detected as expired

Expected results:
detected as about to expire

Additional info:

Comment 1 Jiri Belka 2015-12-21 16:16:03 UTC
ok,  rhevm-3.6.1.3-0.1.el6.noarch

Nov 20, 2015 6:03:45 PM
	
Host dell-r210ii-04 certification is about to expire at 2015-12-15. Please renew the host's certification.


Note You need to log in before you can comment on or make changes to this bug.