Description of problem: I was syncing contents from upgraded satellite(6.2.9) to n-1 capsule(6.2.8) and capsule sync failed w/ error: -bash-4.2# hammer -u admin -p changeme capsule content synchronize --id=2 [............................................................................................................................................] [100%] Error: OST0005: Fetch summary failed. Reason: GLib.Error('Error performing TLS handshake: A TLS fatal alert has been received.', 'g-tls-error-quark', 1) 2017-03-29 05:55:33 7394b2d2 [app] [I] Processing by ForemanTasks::Api::TasksController#show as JSON 2017-03-29 05:55:33 7394b2d2 [app] [I] Parameters: {"id"=>"c6610a6f-67b4-4845-b302-0cb2c04d0d26", "task"=>{}} 2017-03-29 05:55:33 7394b2d2 [app] [I] Authorized user admin(Admin User) 2017-03-29 05:55:33 7394b2d2 [app] [I] Rendered /opt/theforeman/tfm/root/usr/share/gems/gems/foreman-tasks-0.7.14.11/app/views/foreman_tasks/api/tasks/show.json.rabl (116.7ms) 2017-03-29 05:55:33 7394b2d2 [app] [I] Completed 200 OK in 183ms (Views: 120.1ms | ActiveRecord: 12.5ms) 2017-03-29 05:55:33 [foreman-tasks/action] [E] OST0005: Fetch summary failed. Reason: GLib.Error('Error performing TLS handshake: A TLS fatal alert has been received.', 'g-tls-error-quark', 1) (Katello::Errors::PulpError) | /opt/theforeman/tfm/root/usr/share/gems/gems/katello-3.0.0.117/app/lib/actions/pulp/abstract_async_task.rb:121:in `block in external_task=' | /opt/theforeman/tfm/root/usr/share/gems/gems/katello-3.0.0.117/app/lib/actions/pulp/abstract_async_task.rb:119:in `each' | /opt/theforeman/tfm/root/usr/share/gems/gems/katello-3.0.0.117/app/lib/actions/pulp/abstract_async_task.rb:119:in `external_task=' | /opt/theforeman/tfm/root/usr/share/gems/gems/dynflow-0.8.13.4/lib/dynflow/action/polling.rb:98:in `poll_external_task_with_rescue' | /opt/theforeman/tfm/root/usr/share/gems/gems/dynflow-0.8.13.4/lib/dynflow/action/polling.rb:21:in `run' | /opt/theforeman/tfm/root/usr/share/gems/gems/dynflow-0.8.13.4/lib/dynflow/action/cancellable.rb:9:in `run' | /opt/theforeman/tfm/root/usr/share/gems/gems/katello-3.0.0.117/app/lib/actions/pulp/abstract_async_task.rb:45:in `run' | /opt/theforeman/tfm/root/usr/share/gems/gems/dynflow-0.8.13.4/lib/dynflow/action.rb:506:in `block (3 levels) in execute_run' | /opt/theforeman/tfm/root/usr/share/gems/gems/dynflow-0.8.13.4/lib/dynflow/middleware/stack.rb:26:in `call' | /opt/theforeman/tfm/root/usr/share/gems/gems/dynflow-0.8.13.4/lib/dynflow/middleware/stack.rb:26:in `pass' | /opt/theforeman/tfm/root/usr/share/gems/gems/dynflow-0.8.13.4/lib/dynflow/middleware.rb:17:in `pass' | /opt/theforeman/tfm/root/usr/share/gems/gems/dynflow-0.8.13.4/lib/dynflow/middleware.rb:30:in `run' | /opt/theforeman/tfm/root/usr/share/gems/gems/dynflow-0.8.13.4/lib/dynflow/middleware/stack.rb:22:in `call' | /opt/theforeman/tfm/root/usr/share/gems/gems/dynflow-0.8.13.4/lib/dynflow/middleware/stack.rb:26:in `pass' | /opt/theforeman/tfm/root/usr/share/gems/gems/dynflow-0.8.13.4/lib/dynflow/middleware.rb:17:in `pass' Version-Release number of selected component (if applicable): syncing contents from upgraded 6.2.9 satellite to 6.2.8 capsule How reproducible: tried once Steps to Reproduce: 1. 2. 3. Actual results: capsule sync throws following error: Error: OST0005: Fetch summary failed. Reason: GLib.Error('Error performing TLS handshake: A TLS fatal alert has been received.', 'g-tls-error-quark', 1) Expected results: No error Additional info: installed packages on satellite: =============================== ostree-2017.1-2.atomic.el7.x86_64 tfm-rubygem-katello_ostree-3.0.0.117-1.el7sat.noarch tfm-rubygem-foreman_theme_satellite-0.1.42-1.el7sat.noarch satellite-installer-6.2.0.13-1.el7sat.noarch python-pulp-ostree-common-1.1.3.3-1.el7sat.noarch cglib-2.2-18.el7.noarch glib2-2.46.2-4.el7.x86_64 satellite-cli-6.2.9-1.0.el7sat.noarch satellite-capsule-6.2.9-1.0.el7sat.noarch dbus-glib-0.100-7.el7.x86_64 pulp-ostree-plugins-1.1.3.3-1.el7sat.noarch glibc-common-2.17-157.el7_3.1.x86_64 satellite-6.2.9-1.0.el7sat.noarch glib-networking-2.42.0-1.el7.x86_64 glibc-2.17-157.el7_3.1.x86_64 Installed packages on capsule: ================================= pulp-ostree-plugins-1.1.3.3-1.el7sat.noarch dbus-glib-0.100-7.el7.x86_64 glib-networking-2.42.0-1.el7.x86_64 glib2-2.46.2-4.el7.x86_64 satellite-capsule-6.2.8-4.0.el7sat.noarch ostree-2017.1-2.atomic.el7.x86_64 qe-capsule-upgrade-rhel7.capqe.lab.eng.rdu2.redhat.com-qpid-broker-1.0-1.noarch glibc-common-2.17-157.el7_3.1.x86_64 qe-capsule-upgrade-rhel7.capqe.lab.eng.rdu2.redhat.com-qpid-router-client-1.0-1.noarch qe-capsule-upgrade-rhel7.capqe.lab.eng.rdu2.redhat.com-foreman-proxy-client-1.0-1.noarch qe-capsule-upgrade-rhel7.capqe.lab.eng.rdu2.redhat.com-apache-1.0-1.noarch qe-capsule-upgrade-rhel7.capqe.lab.eng.rdu2.redhat.com-puppet-client-1.0-1.noarch python-pulp-ostree-common-1.1.3.3-1.el7sat.noarch qe-capsule-upgrade-rhel7.capqe.lab.eng.rdu2.redhat.com-qpid-router-server-1.0-1.noarch qe-capsule-upgrade-rhel7.capqe.lab.eng.rdu2.redhat.com-qpid-client-cert-1.0-1.noarch katello-capsule-3.0.0-17.el7sat.noarch qe-capsule-upgrade-rhel7.capqe.lab.eng.rdu2.redhat.com-foreman-proxy-1.0-1.noarch NetworkManager-glib-1.4.0-17.el7_3.x86_64 glibc-2.17-157.el7_3.1.x86_64
Created attachment 1267273 [details] foreman-debug
I think Jeff has already spent some time investigating this.
reproducible w/ sat6.2.9 snap2 (satellite server is upgraded to 6.2.9 snap2 and capsule is at 6.2.8) -bash-4.2# hammer -u admin -p changeme capsule content synchronize --id=2 [.......................................................................................................................................... ] [97%] Error: OST0005: Fetch summary failed. Reason: GLib.Error('Error performing TLS handshake: A TLS fatal alert has been received.', 'g-tls-error-quark', 1) -bash-4.2# rpm -qa | grep satellite satellite-cli-6.2.9-2.0.el7sat.noarch satellite-capsule-6.2.9-2.0.el7sat.noarch satellite-installer-6.2.0.13-1.el7sat.noarch satellite-6.2.9-2.0.el7sat.noarch Moreover, I filed similar issue a long time back during 6.2 release testing, so looks like a regression. https://bugzilla.redhat.com/show_bug.cgi?id=1323644#c34 Currently following version of libtasn package is installed on capsule as well as on staellite libtasn1-3.8-3.el7.x86_64
Nothing jumps out at me. Likely a certificate issue.
This is consistently reproducible w/ 6.2.9. Especially, when capsule is at 6.2.8 and satellite is at 6.2.9. I do have setup and can easily reproduce if someone wants to take a look. thanks..
Tested with 6.2.13 and ostree-2017.11-1.el7.x86_64.rpm as well as old package ostree-2017.1-2.atomic.el7.x86_64. Now error is changed something else: 2018-01-12 07:01:32 [katello/pulp_rest] [E] RestClient.post "https://sjagtap-qe-capsule.usersys.redhat.com/pulp/api/v2/repositories/", 10879 byte(s) length, "Accept"=>"*/*; q=0.5, application/xml", "Accept-Encoding"=>"gzip, deflate", "Content-Length"=>"10879", "accept"=>"application/json", "content_type"=>"application/json" | \n# => 400 BadRequest | application/json 385 bytes | 2018-01-12 07:01:32 [foreman-tasks/action] [E] 400 Bad Request (RestClient::BadRequest) | /opt/theforeman/tfm/root/usr/share/gems/gems/rest-client-1.6.7/lib/restclient/abstract_response.rb:48:in `return!' | /opt/theforeman/tfm/root/usr/share/gems/gems/runcible-1.11.0/lib/runcible/base.rb:79:in `block in get_response' | /opt/theforeman/tfm/root/usr/share/gems/gems/rest-client-1.6.7/lib/restclient/request.rb:228:in `call' | /opt/theforeman/tfm/root/usr/share/gems/gems/rest-client-1.6.7/lib/restclient/request.rb:228:in `process_result' | /opt/theforeman/tfm/root/usr/share/gems/gems/rbovirt-0.0.38.1/lib/restclient_ext/request.rb:50:in `block in transmit' | /opt/rh/rh-ruby22/root/usr/share/ruby/net/http.rb:853:in `start' | /opt/theforeman/tfm/root/usr/share/gems/gems/rbovirt-0.0.38.1/lib/restclient_ext/request.rb:44:in `transmit' | /opt/theforeman/tfm/root/usr/share/gems/gems/rest-client-1.6.7/lib/restclient/request.rb:64:in `execute' | /opt/theforeman/tfm/root/usr/share/gems/gems/rest-client-1.6.7/lib/restclient/request.rb:33:in `execute' | /opt/theforeman/tfm/root/usr/share/gems/gems/rest-client-1.6.7/lib/restclient/resource.rb:67:in `post' | /opt/theforeman/tfm/root/usr/share/gems/gems/runcible-1.11.0/lib/runcible/base.rb:78:in `get_response' | /opt/theforeman/tfm/root/usr/share/gems/gems/runcible-1.11.0/lib/runcible/base.rb:66:in `call' 2018-01-12 07:01:32 [katello/pulp_rest] [I] RestClient.post "https://sjagtap-qe-capsule.usersys.redhat.com/pulp/api/v2/repositories/Default_Organization-QE-cv_atomic-Red_Hat_Enterprise_Linux_Atomic_Host-Red_Hat_Enterprise_Linux_Atomic_Host_Trees/actions/unassociate/", "{\"criteria\":{}}", "Accept"=>"*/*; q=0.5, application/xml", "Accept-Encoding"=>"gzip, deflate", "Content-Length"=>"15", "accept"=>"application/json", "content_type"=>"application/json" | \n# => 404 NotFound | application/json 942 bytes | 2018-01-12 07:01:32 [foreman-tasks/action] [E] 404 Resource Not Found (RestClient::ResourceNotFound) | /opt/theforeman/tfm/root/usr/share/gems/gems/rest-client-1.6.7/lib/restclient/abstract_response.rb:48:in `return!' | /opt/theforeman/tfm/root/usr/share/gems/gems/runcible-1.11.0/lib/runcible/base.rb:79:in `block in get_response' | /opt/theforeman/tfm/root/usr/share/gems/gems/rest-client-1.6.7/lib/restclient/request.rb:228:in `call' | /opt/theforeman/tfm/root/usr/share/gems/gems/rest-client-1.6.7/lib/restclient/request.rb:228:in `process_result' | /opt/theforeman/tfm/root/usr/share/gems/gems/rbovirt-0.0.38.1/lib/restclient_ext/request.rb:50:in `block in transmit' | /opt/rh/rh-ruby22/root/usr/share/ruby/net/http.rb:853:in `start' | /opt/theforeman/tfm/root/usr/share/gems/gems/rbovirt-0.0.38.1/lib/restclient_ext/request.rb:44:in `transmit' | /opt/theforeman/tfm/root/usr/share/gems/gems/rest-client-1.6.7/lib/restclient/request.rb:64:in `execute' | /opt/theforeman/tfm/root/usr/share/gems/gems/rest-client-1.6.7/lib/restclient/request.rb:33:in `execute' | /opt/theforeman/tfm/root/usr/share/gems/gems/rest-client-1.6.7/lib/restclient/resource.rb:67:in `post' | /opt/theforeman/tfm/root/usr/share/gems/gems/runcible-1.11.0/lib/runcible/base.rb:78:in `get_response' | /opt/theforeman/tfm/root/usr/share/gems/gems/runcible-1.11.0/lib/runcible/base.rb:66:in `call'
Can we have any update on this Bug please?
Echoing Neha's request for a status update, please. Customer's work with Atomic Host is significantly impacted by this bug. Thanks!
I upgraded satellite & capsule 6.2.13 -> 6.2.14 and I still see same issue with capsule sync: -bash-4.2# hammer -u admin -p changeme capsule content synchronize --id=2 [.........................................................................................................................................................................................................] [100%] Error: OST0005: Fetch summary failed. Reason: GLib.Error('Error performing TLS handshake: A TLS fatal alert has been received.', 'g-tls-error-quark', 1) -bash-4.2# 2018-02-14 05:50:36 [foreman-tasks/action] [E] OST0005: Fetch summary failed. Reason: GLib.Error('Error performing TLS handshake: A TLS fatal alert has been received.', 'g-tls-error-quark', 1) (Katello::Errors::PulpError) | /opt/theforeman/tfm/root/usr/share/gems/gems/katello-3.0.0.162/app/lib/actions/pulp/abstract_async_task.rb:121:in `block in external_task=' | /opt/theforeman/tfm/root/usr/share/gems/gems/katello-3.0.0.162/app/lib/actions/pulp/abstract_async_task.rb:119:in `each' | /opt/theforeman/tfm/root/usr/share/gems/gems/katello-3.0.0.162/app/lib/actions/pulp/abstract_async_task.rb:119:in `external_task=' | /opt/theforeman/tfm/root/usr/share/gems/gems/dynflow-0.8.13.6/lib/dynflow/action/polling.rb:98:in `poll_external_task_with_rescue' | /opt/theforeman/tfm/root/usr/share/gems/gems/dynflow-0.8.13.6/lib/dynflow/action/polling.rb:21:in `run' | /opt/theforeman/tfm/root/usr/share/gems/gems/dynflow-0.8.13.6/lib/dynflow/action/cancellable.rb:9:in `run' | / Installed packages: ostree-2017.1-2.atomic.el7.x86_64 tfm-rubygem-katello_ostree-3.0.0.162-1.el7sat.noarch python-pulp-ostree-common-1.1.3.3-1.el7sat.noarch pulp-ostree-plugins-1.1.3.3-1.el7sat.noarch
we won't be shipping an update to ostree in 6.2 but the users are free to do the following to get the latest from extras: # subscription-manager repos --enable rhel-7-server-extras-rpms Repository 'rhel-7-server-extras-rpms' is enabled for this system. # yum update ostree ... # subscription-manager repos --disable rhel-7-server-extras-rpms Repository 'rhel-7-server-extras-rpms' is disabled for this system.
closing as NEXTRELEASE as we have shipped an updated version of ostree in 6.3
The needinfo request[s] on this closed bug have been removed as they have been unresolved for 500 days