You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@cloudstack.apache.org by "0sorkon (via GitHub)" <gi...@apache.org> on 2024/04/23 14:49:32 UTC
[I] PKIX path building failed when trying to add a host to the cluster with HTTPS linstor [cloudstack]
0sorkon opened a new issue, #8963:
URL: https://github.com/apache/cloudstack/issues/8963
* Bug Report
* Improvement Request
* Enhancement Request
* Feature Idea
* Documentation Report
* Other
##### COMPONENT NAME
<!--
Categorize the issue, e.g. API, VR, VPN, UI, etc.
-->
~~~
agent
~~~
##### CLOUDSTACK VERSION
<!--
New line separated list of affected versions, commit ID for issues on main branch.
-->
~~~
controller - 4.18.1.0-shapeblue1
target host agent - 4.18.2.0-shapeblue0
~~~
##### CONFIGURATION
advanced networking
linstror as primary storage (https://storage.primary.company.net:3371)
##### OS / ENVIRONMENT
ubuntu 22.04
##### SUMMARY
When trying to add a host to the cluster, the host is added in an alert state. In the management server logs:
`DEBUG [c.c.a.m.AgentManagerImpl] (AgentConnectTaskPool-463:ctx-9e5be0cf) (logid:7611540c) Details from executing class com.cloud.agent.api.ModifyStoragePoolCommand: javax.ws.rs. ProcessingException: javax.net.ssl.SSLHandshakeException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target`
The other few hosts of version 4.18.1.0 were added normally.
Certificates were added to the java keystore before the addition
`keytool -import -trustcacerts -keystore /etc/ssl/certs/java/cacerts -storepass changeit -noprompt -alias linstor_controller -file /tmp/linstor.crt`
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@cloudstack.apache.org.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [I] PKIX path building failed when trying to add a host to the cluster with HTTPS linstor [cloudstack]
Posted by "weizhouapache (via GitHub)" <gi...@apache.org>.
weizhouapache closed issue #8963: PKIX path building failed when trying to add a host to the cluster with HTTPS linstor
URL: https://github.com/apache/cloudstack/issues/8963
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@cloudstack.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [I] PKIX path building failed when trying to add a host to the cluster with HTTPS linstor [cloudstack]
Posted by "rp- (via GitHub)" <gi...@apache.org>.
rp- commented on issue #8963:
URL: https://github.com/apache/cloudstack/issues/8963#issuecomment-2074676097
this is the first request for this, I didn't have it on my TODO list.
I can add it, but certainly low priority.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@cloudstack.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [I] PKIX path building failed when trying to add a host to the cluster with HTTPS linstor [cloudstack]
Posted by "DaanHoogland (via GitHub)" <gi...@apache.org>.
DaanHoogland commented on issue #8963:
URL: https://github.com/apache/cloudstack/issues/8963#issuecomment-2074726714
> this is the first request for this, I didn't have it on my TODO list. I can add it, but certainly low priority.
I'm not trying to tell you what to do @rp- , just trying to triage the ticket correctly
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@cloudstack.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [I] PKIX path building failed when trying to add a host to the cluster with HTTPS linstor [cloudstack]
Posted by "0sorkon (via GitHub)" <gi...@apache.org>.
0sorkon commented on issue #8963:
URL: https://github.com/apache/cloudstack/issues/8963#issuecomment-2074295654
UPDATE: downgrade to
```
cloudstack-agent=4.18.1.0-shapeblue0
cloudstack-common=4.18.1.0-shapeblue0
```
resolve this issue
I think 4.18.1.0-shapeblue1 would also work, but I'm not sure about upgrading to 4.18.2.0 because as I wrote in the beginning, I couldn't successfully connect the host.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@cloudstack.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [I] PKIX path building failed when trying to add a host to the cluster with HTTPS linstor [cloudstack]
Posted by "rohityadavcloud (via GitHub)" <gi...@apache.org>.
rohityadavcloud commented on issue #8963:
URL: https://github.com/apache/cloudstack/issues/8963#issuecomment-2074487728
You must have both agent and management server in the same CloudStack version and build @0sorkon.
pinging @rp- to look at Linstor related issues and cert issues.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@cloudstack.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [I] PKIX path building failed when trying to add a host to the cluster with HTTPS linstor [cloudstack]
Posted by "rp- (via GitHub)" <gi...@apache.org>.
rp- commented on issue #8963:
URL: https://github.com/apache/cloudstack/issues/8963#issuecomment-2074551325
There is currently no support for an encrypted client connection with the CloudStack plugin.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@cloudstack.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [I] PKIX path building failed when trying to add a host to the cluster with HTTPS linstor [cloudstack]
Posted by "DaanHoogland (via GitHub)" <gi...@apache.org>.
DaanHoogland commented on issue #8963:
URL: https://github.com/apache/cloudstack/issues/8963#issuecomment-2074594405
@rp- , is this planned/unplanned? (i.e. how do we deal with this ticket)
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@cloudstack.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org