New commit detected on ManageIQ/manageiq/hammer: https://github.com/ManageIQ/manageiq/commit/836f43ebf98c17120465dfe518c47ebf88b6ce7d commit 836f43ebf98c17120465dfe518c47ebf88b6ce7d Author: Adam Grare <agrare> AuthorDate: Thu May 16 10:58:49 2019 -0400 Commit: Adam Grare <agrare> CommitDate: Thu May 16 10:58:49 2019 -0400 Merge pull request #18762 from fdupont-redhat/v2v_conversion_host_handle_cacert_from_ui [V2V] Conversion Host - Handle CA bundle from UI (cherry picked from commit d3248d61d29d109f481818ed78dec5e87b6cba6f) https://bugzilla.redhat.com/show_bug.cgi?id=1711036 app/models/conversion_host.rb | 4 +- app/models/conversion_host/configurations.rb | 4 +- spec/models/conversion_host_spec.rb | 5 +- 3 files changed, 8 insertions(+), 5 deletions(-)
New commit detected on ManageIQ/manageiq-v2v/hammer: https://github.com/ManageIQ/manageiq-v2v/commit/c0e7bc8bc78c392f7af066562061c9ed7b84c660 commit c0e7bc8bc78c392f7af066562061c9ed7b84c660 Author: Milan Zázrivec <mzazrivec> AuthorDate: Wed May 15 04:42:01 2019 -0400 Commit: Milan Zázrivec <mzazrivec> CommitDate: Wed May 15 04:42:01 2019 -0400 Merge pull request #952 from mturley/951-conv-host-ssl-field [#951] [BZ#1708359] Add OpenStack Trusted CA Certificates field to Conversion Host Wizard (cherry picked from commit 69c987b116af3094c20b073ef564a7ea7a88c282) Fixes https://bugzilla.redhat.com/show_bug.cgi?id=1711036 app/javascript/react/screens/App/Settings/screens/ConversionHostsSettings/components/ConversionHostWizard/ConversionHostWizardAuthenticationStep/ConversionHostWizardAuthenticationStep.js | 54 +- app/javascript/react/screens/App/Settings/screens/ConversionHostsSettings/components/ConversionHostWizard/ConversionHostWizardAuthenticationStep/index.js | 3 +- app/javascript/react/screens/App/Settings/screens/ConversionHostsSettings/components/ConversionHostWizard/ConversionHostWizardResultsStep/helpers.js | 1 + app/javascript/react/screens/App/Settings/screens/ConversionHostsSettings/components/RetryConversionHostConfirmationModal/RetryConversionHostConfirmationModal.js | 8 +- app/javascript/react/screens/App/common/forms/SshKeyField.js | 30 - app/javascript/react/screens/App/common/forms/TextFileField.js | 32 + app/javascript/react/screens/App/common/forms/TextFileInput/TextFileInput.js | 31 +- app/javascript/react/screens/App/common/forms/TextFileInput/TextFileInput.scss | 2 +- 8 files changed, 110 insertions(+), 51 deletions(-)
Earlier to enable SSL connection, we were adding overcloud and undercloud certs to /etc/pki/ca-trust/source/anchors dir of ManageIQ. Now, I am trying to understand what should be the usecase if we add overcloud cert to 'verify TLS' option.. I have added OSP in 'SSL without validation' and tried with and without adding overcloud cert in new 'verify TLS' option but migration still failing with similar error ``` Failed to discover available identity versions when contacting https://10.8.58.137:13000/v3. Attempting to parse version from URL. SSL exception connecting to https://10.8.58.137:13000/v3/auth/tokens: [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:618) ``` is it expected? can't we run migration with 'SSL without validation'? should I try it by adding SSL while adding OSP and ignoring TLS?
OSP with VDDK + SSL without validation + TLS works totally fine. We have used ca-chain to import certs as a TLS. Thanks to fabien for steps and confirmation. Verifying BZ, more info on Comment #4 and Comment #6. CFME: 5.10.5.0 Using openstack TLS for conversion appliance configuration https://mojo.redhat.com/docs/DOC-1198846-v2v-using-openstack-tls-for-conversion-appliance-configuration
Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory, and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://access.redhat.com/errata/RHSA-2019:1429