Cannot sync repos (no implicit conversion of OpenSSL)

Support
11

I tried again using Hammer and the result is the same:

hammer repository create --organization-id 1 --product “CentOS 8 Linux for x86_64” --name “CentOS 8 Base RPMS” --label “CentOS_8_Base_RPMS” --content-type “yum” --download-policy “on_demand” --gpg-key “RPM-GPG-KEY-centosofficial” --url “http://centos.mirror.liquidtelecom.com/8/BaseOS/x86_64/os/” --mirror-on-sync “no”

Could not create the repository:
Task b347206c-f5a6-4945-8398-78edf4a635f9: Faraday::ConnectionFailed: no implicit conversion of OpenSSL::X509::Certificate into String (TypeError)

The RPM’s I have installed are:

rpm -qa | egrep “foreman|katello|tfm”

foreman.persephone.biz-qpid-broker-1.0-1.noarch
tfm-rubygem-logging-2.2.2-5.el7.noarch
tfm-rubygem-promise.rb-0.7.4-2.el7.noarch
foreman.persephone.biz-foreman-proxy-1.0-1.noarch
rubygem-foreman_maintain-0.6.9-1.el7.noarch
tfm-rubygem-deep_cloneable-3.0.0-3.el7.noarch
tfm-rubygem-fog-xml-0.1.2-8.el7.noarch
tfm-rubygem-globalid-0.4.2-1.el7.noarch
tfm-rubygem-unicode-0.4.4.4-3.el7.x86_64
tfm-rubygem-activestorage-6.0.3.1-1.el7.noarch
tfm-rubygem-rest-client-2.0.2-3.el7.noarch
tfm-rubygem-activerecord-session_store-1.1.1-4.el7.noarch
tfm-rubygem-hammer_cli_foreman_openscap-0.1.11-1.fm2_1.el7.noarch
tfm-rubygem-deface-1.5.3-2.el7.noarch
tfm-rubygem-ms_rest_azure-0.11.1-2.el7.noarch
pulp-katello-1.0.3-1.el7.noarch
tfm-rubygem-hammer_cli_foreman_bootdisk-0.3.0-1.el7.noarch
tfm-rubygem-foreman_bootdisk-17.0.2-2.fm2_1.el7.noarch
tfm-rubygem-i18n-1.8.2-1.el7.noarch
katello-3.16.0-1.el7.noarch
tfm-rubygem-openscap-0.4.9-3.el7.noarch
tfm-rubygem-multipart-post-2.0.0-2.el7.noarch
tfm-rubygem-pulp_container_client-1.4.1-1.el7.noarch
tfm-rubygem-method_source-0.9.2-1.el7.noarch
tfm-rubygem-redis-4.1.2-2.el7.noarch
tfm-rubygem-xmlrpc-0.3.0-2.el7.noarch
tfm-rubygem-nokogiri-1.10.9-1.el7.x86_64
foreman.persephone.biz-apache-1.0-1.noarch
tfm-rubygem-thread_safe-0.3.6-5.el7.noarch
tfm-rubygem-powerbar-2.0.1-2.el7.noarch
tfm-rubygem-rabl-0.14.3-1.el7.noarch
foreman.persephone.biz-qpid-router-client-1.0-1.noarch
tfm-rubygem-validates_lengths_from_database-0.5.0-7.el7.noarch
tfm-rubygem-fog-libvirt-0.7.0-2.el7.noarch
tfm-rubygem-facter-2.4.0-7.el7.x86_64
tfm-rubygem-jwt-2.2.1-2.el7.noarch
foreman-installer-katello-2.1.1-2.el7.noarch
tfm-rubygem-bcrypt-3.1.12-3.el7.x86_64
tfm-rubygem-actionview-6.0.3.1-1.el7.noarch
tfm-rubygem-unf_ext-0.0.7.2-3.el7.x86_64
tfm-rubygem-angular-rails-templates-1.1.0-1.el7.noarch
tfm-rubygem-rails-6.0.3.1-1.el7.noarch
tfm-rubygem-foreman_remote_execution-3.3.5-1.fm2_1.el7.noarch
tfm-rubygem-azure_mgmt_network-0.19.0-1.el7.noarch
tfm-rubygem-rack-2.2.2-1.el7.noarch
tfm-rubygem-foreman-tasks-2.0.2-1.fm2_1.el7.noarch
tfm-rubygem-smart_proxy_dynflow_core-0.2.5-1.fm2_1.el7.noarch
tfm-rubygem-awesome_print-1.8.0-5.el7.noarch
tfm-rubygem-net-ssh-4.2.0-2.el7.noarch
foreman-selinux-2.1.1-1.el7.noarch
tfm-rubygem-mail-2.7.1-1.el7.noarch
tfm-rubygem-pulp_2to3_migration_client-0.2.0-0.1.b6.el7.noarch
tfm-rubygem-nio4r-2.5.2-1.el7.x86_64
tfm-rubygem-websocket-extensions-0.1.4-1.el7.noarch
tfm-rubygem-puma-4.3.3-4.el7.x86_64
tfm-rubygem-gssapi-1.2.0-7.el7.noarch
tfm-rubygem-mimemagic-0.3.5-1.el7.noarch
tfm-rubygem-sshkey-1.9.0-4.el7.noarch
katello-server-ca-1.0-1.noarch
tfm-rubygem-sequel-5.7.1-3.el7.noarch
tfm-rubygem-ansi-1.5.0-2.el7.noarch
tfm-rubygem-hashie-3.6.0-2.el7.noarch
katello-repos-3.16.0-1.el7.noarch
tfm-rubygem-mime-types-3.2.2-4.el7.noarch
tfm-rubygem-oauth-0.5.4-4.el7.noarch
tfm-rubygem-http-cookie-1.0.2-4.el7.noarch
tfm-rubygem-hammer_cli-2.1.1-1.el7.noarch
tfm-rubygem-concurrent-ruby-1.1.6-2.el7.noarch
tfm-rubygem-sprockets-3.7.2-6.el7.noarch
tfm-rubygem-tilt-2.0.8-4.el7.noarch
tfm-rubygem-graphql-1.8.14-2.el7.noarch
tfm-rubygem-get_process_mem-0.2.1-4.el7.noarch
tfm-rubygem-bundler_ext-0.4.1-5.el7.noarch
tfm-rubygem-safemode-1.3.5-3.el7.noarch
katello-selinux-3.4.0-1.el7.noarch
tfm-rubygem-rack-jsonp-1.3.1-9.el7.noarch
katello-debug-3.16.0-1.el7.noarch
tfm-rubygem-mini_mime-1.0.2-1.el7.noarch
tfm-rubygem-erubi-1.9.0-1.el7.noarch
tfm-rubygem-pulp_file_client-1.0.1-1.el7.noarch
tfm-rubygem-pulp_certguard_client-0.1.0rc5-1.el7.noarch
tfm-rubygem-zeitwerk-2.2.2-1.el7.noarch
tfm-rubygem-addressable-2.6.0-2.el7.noarch
tfm-rubygem-hammer_cli_foreman_docker-0.0.5-1.el7.noarch
tfm-rubygem-mustermann-1.0.2-4.el7.noarch
tfm-rubygem-algebrick-0.7.3-7.el7.noarch
tfm-rubygem-robotex-1.0.0-21.el7.noarch
foreman-release-scl-7-3.el7.noarch
tfm-runtime-6.1-1.el7.x86_64
tfm-rubygem-highline-1.7.8-5.el7.noarch
foreman.persephone.biz-foreman-client-1.0-1.noarch
tfm-rubygem-foreman-tasks-core-0.3.4-1.fm2_1.el7.noarch
tfm-rubygem-tzinfo-1.2.6-1.el7.noarch
foreman.persephone.biz-qpid-router-server-1.0-1.noarch
tfm-rubygem-activemodel-6.0.3.1-1.el7.noarch
tfm-rubygem-fog-json-1.2.0-3.el7.noarch
tfm-rubygem-friendly_id-5.3.0-1.el7.noarch
foreman-ec2-2.1.1-1.el7.noarch
tfm-rubygem-ancestry-3.0.7-1.el7.noarch
tfm-rubygem-ldap_fluff-0.4.7-5.el7.noarch
tfm-rubygem-excon-0.58.0-5.el7.noarch
tfm-rubygem-crass-1.0.6-1.el7.noarch
tfm-rubygem-actionpack-6.0.3.1-1.el7.noarch
tfm-rubygem-actiontext-6.0.3.1-1.el7.noarch
tfm-rubygem-responders-3.0.0-3.el7.noarch
tfm-rubygem-gettext-3.1.4-10.el7.noarch
tfm-rubygem-roadie-rails-2.1.1-2.el7.noarch
tfm-rubygem-foreman_remote_execution_core-1.3.0-1.el7.noarch
tfm-rubygem-apipie-rails-0.5.17-3.el7.noarch
tfm-rubygem-ms_rest-0.7.4-2.el7.noarch
tfm-rubygem-azure_mgmt_resources-0.17.6-1.el7.noarch
tfm-rubygem-foreman_azure_rm-2.1.2-1.fm2_1.el7.noarch
tfm-rubygem-daemons-1.2.3-6.el7.noarch
tfm-rubygem-katello-3.16.0-1.el7.noarch
tfm-rubygem-sqlite3-1.3.13-6.el7.x86_64
tfm-rubygem-foreman_ansible_core-3.0.3-1.fm2_1.el7.noarch
tfm-rubygem-smart_proxy_remote_execution_ssh-0.3.0-4.fm2_1.el7.noarch
foreman-console-2.1.1-1.el7.noarch
foreman-service-2.1.1-1.el7.noarch
tfm-rubygem-gitlab-sidekiq-fetcher-0.5.2-2.el7.noarch
tfm-rubygem-rsec-0.4.3-4.el7.noarch
foreman-proxy-2.1.1-1.el7.noarch
tfm-rubygem-anemone-0.7.2-17.el7.noarch
tfm-rubygem-statsd-instrument-2.1.4-3.el7.noarch
tfm-rubygem-deacon-1.0.0-4.el7.noarch
tfm-rubygem-multi_json-1.14.1-1.el7.noarch
tfm-rubygem-kafo_parsers-1.1.0-3.el7.noarch
tfm-rubygem-kafo-4.1.0-3.el7.noarch
foreman-installer-2.1.1-2.el7.noarch
tfm-rubygem-mime-types-data-3.2018.0812-4.el7.noarch
tfm-rubygem-domain_name-0.5.20160310-4.el7.noarch
tfm-rubygem-apipie-bindings-0.3.0-2.el7.noarch
tfm-rubygem-amazing_print-1.1.0-1.el7.noarch
tfm-rubygem-locale-2.0.9-14.el7.noarch
tfm-rubygem-gettext_i18n_rails-1.8.0-2.el7.noarch
tfm-rubygem-net-ldap-0.16.1-2.el7.noarch
tfm-rubygem-ruby2ruby-2.4.2-3.el7.noarch
tfm-rubygem-rack-test-1.1.0-4.el7.noarch
tfm-rubygem-faraday-0.15.4-2.el7.noarch
tfm-rubygem-pulp_rpm_client-3.5.0-1.el7.noarch
tfm-rubygem-parse-cron-0.1.4-4.fm2_1.el7.noarch
tfm-rubygem-public_suffix-3.0.3-2.el7.noarch
tfm-rubygem-thor-1.0.1-2.el7.noarch
tfm-rubygem-formatador-0.2.1-12.el7.noarch
tfm-rubygem-pg-1.1.4-3.el7.x86_64
tfm-rubygem-activesupport-6.0.3.1-1.el7.noarch
foreman.persephone.biz-foreman-proxy-client-1.0-1.noarch
tfm-rubygem-activerecord-6.0.3.1-1.el7.noarch
foreman-cli-2.1.1-1.el7.noarch
tfm-rubygem-scoped_search-4.1.8-1.el7.noarch
tfm-rubygem-fog-aws-3.6.5-1.el7.noarch
tfm-rubygem-will_paginate-3.1.7-3.el7.noarch
tfm-rubygem-runcible-2.13.1-1.el7.noarch
tfm-rubygem-fog-core-2.1.0-3.el7.noarch
tfm-rubygem-hammer_cli_foreman_tasks-0.0.14-1.fm2_1.el7.noarch
tfm-rubygem-loofah-2.4.0-1.el7.noarch
tfm-rubygem-railties-6.0.3.1-1.el7.noarch
tfm-rubygem-actionmailbox-6.0.3.1-1.el7.noarch
tfm-rubygem-rails-i18n-6.0.0-2.el7.noarch
tfm-rubygem-text-1.3.0-7.el7.noarch
tfm-rubygem-actionmailer-6.0.3.1-1.el7.noarch
tfm-rubygem-hammer_cli_foreman_remote_execution-0.1.2-1.fm2_1.el7.noarch
tfm-rubygem-webpack-rails-0.9.8-5.el7.noarch
tfm-rubygem-timeliness-0.3.10-1.el7.noarch
tfm-rubygem-azure_mgmt_compute-0.18.7-1.el7.noarch
tfm-rubygem-azure_mgmt_storage-0.17.10-1.el7.noarch
foreman-2.1.1-1.el7.noarch
tfm-rubygem-smart_proxy_pulp-2.1.0-3.fm2_1.el7.noarch
tfm-rubygem-smart_proxy_openscap-0.7.3-1.fm2_1.el7.noarch
tfm-rubygem-wirb-1.0.3-6.el7.noarch
tfm-rubygem-foreman_openscap-4.0.2-1.fm2_1.el7.noarch
tfm-rubygem-connection_pool-2.2.2-2.el7.noarch
foreman-dynflow-sidekiq-2.1.1-1.el7.noarch
tfm-rubygem-ffi-1.12.2-1.el7.x86_64
tfm-rubygem-rkerberos-0.1.5-18.el7.x86_64
tfm-rubygem-ruby-libvirt-0.7.1-1.el7.x86_64
tfm-rubygem-roadie-3.4.0-3.el7.noarch
katello-client-bootstrap-1.7.5-1.el7.noarch
tfm-rubygem-rack-cors-1.0.2-2.el7.noarch
tfm-rubygem-kafo_wizards-0.0.1-4.el7.noarch
tfm-rubygem-net-ping-2.0.1-4.el7.noarch
tfm-rubygem-clamp-1.1.2-6.el7.noarch
tfm-rubygem-rails-dom-testing-2.0.3-6.el7.noarch
foreman.persephone.biz-puppet-client-1.0-1.noarch
tfm-rubygem-audited-4.9.0-3.el7.noarch
foreman-libvirt-2.1.1-1.el7.noarch
tfm-rubygem-rainbow-2.2.1-3.el7.noarch
tfm-rubygem-fast_gettext-1.4.1-4.el7.noarch
katello-certs-tools-2.7.0-1.el7.noarch
tfm-rubygem-stomp-1.4.9-1.el7.noarch
tfm-rubygem-rails-html-sanitizer-1.3.0-1.el7.noarch
tfm-rubygem-unf-0.1.3-8.el7.noarch
tfm-rubygem-fx-0.5.0-1.el7.noarch
tfm-rubygem-hammer_cli_foreman_ansible-0.3.2-1.fm2_1.el7.noarch
tfm-rubygem-actioncable-6.0.3.1-1.el7.noarch
tfm-rubygem-foreman_ansible-5.1.1-1.fm2_1.el7.noarch
tfm-rubygem-azure_mgmt_subscriptions-0.18.2-1.el7.noarch
foreman-postgresql-2.1.1-1.el7.noarch
tfm-rubygem-foreman_remote_execution-cockpit-3.3.5-1.fm2_1.el7.noarch
tfm-rubygem-smart_proxy_dynflow-0.2.4-6.fm2_1.el7.noarch
tfm-rubygem-ruby_parser-3.10.1-3.el7.noarch
tfm-rubygem-paint-0.8.7-9.el7.noarch
tfm-rubygem-builder-3.2.4-1.el7.noarch
tfm-rubygem-net-scp-1.2.1-4.el7.noarch
tfm-rubygem-concurrent-ruby-edge-0.6.0-2.fm2_1.el7.noarch
tfm-rubygem-pulp_ansible_client-0.2.0b13.dev01588546902-1.el7.noarch
tfm-rubygem-secure_headers-6.3.0-2.el7.noarch
tfm-rubygem-websocket-driver-0.7.1-1.el7.x86_64
tfm-rubygem-rb-inotify-0.9.7-5.el7.noarch
foreman-release-2.1.1-1.el7.noarch
tfm-rubygem-marcel-0.3.3-1.el7.noarch
tfm-rubygem-polyglot-0.3.5-2.el7.noarch
katello-default-ca-1.0-1.noarch
tfm-rubygem-dynflow-1.4.6-1.fm2_1.el7.noarch
tfm-rubygem-little-plugger-1.1.4-2.el7.noarch
tfm-rubygem-graphql-batch-0.3.10-2.el7.noarch
foreman.persephone.biz-qpid-client-cert-1.0-1.noarch
tfm-rubygem-activerecord-import-1.0.0-2.el7.noarch
tfm-rubygem-ipaddress-0.8.0-12.el7.noarch
tfm-rubygem-activejob-6.0.3.1-1.el7.noarch
tfm-rubygem-unicode-display_width-1.0.5-4.el7.noarch
tfm-rubygem-sprockets-rails-3.2.1-6.el7.noarch
tfm-rubygem-netrc-0.11.0-5.el7.noarch
tfm-rubygem-x-editable-rails-1.5.5-5.el7.noarch
tfm-rubygem-hammer_cli_foreman_azure_rm-0.2.0-1.el7.noarch
tfm-rubygem-record_tag_helper-1.0.1-3.el7.noarch
tfm-rubygem-faraday-cookie_jar-0.0.6-1.el7.noarch
tfm-rubygem-hammer_cli_foreman-2.1.2-1.el7.noarch
tfm-rubygem-hammer_cli_katello-0.22.2-1.el7.noarch
tfm-rubygem-sexp_processor-4.10.0-6.el7.noarch
tfm-rubygem-smart_proxy_ansible-3.0.1-6.fm2_1.el7.noarch
foreman-debug-2.1.1-1.el7.noarch
tfm-rubygem-rack-protection-2.0.3-4.el7.noarch
katello-common-3.16.0-1.el7.noarch
tfm-rubygem-apipie-params-0.0.5-4.el7.noarch
tfm-rubygem-pulpcore_client-3.4.1-1.el7.noarch
tfm-rubygem-css_parser-1.4.7-4.el7.noarch
tfm-rubygem-sinatra-2.0.3-4.el7.noarch
tfm-rubygem-apipie-dsl-2.2.2-2.el7.noarch
tfm-rubygem-sidekiq-5.2.7-3.el7.noarch
tfm-rubygem-rubyipmi-0.10.0-6.el7.noarch
tfm-rubygem-mini_portile2-2.4.0-1.el7.noarch

12

I should also add that I have tried with both Centos-7 and Centos-8 clients and REPOs, and this makes no difference to the error.

13

Same here on fresh installation

14

I have just done a fresh installation on CentOS Linux release 7.8.2003 (Core) with Katello 3.17 and foreman-release-2.2.0-0.3.rc1 and I still get:

Task 71290fad-15c0-41e8-b3be-3a6a09b9ec39: Faraday::ConnectionFailed: no implicit conversion of OpenSSL::X509::Certificate into String (TypeError)

when I try to create a repo? Any ideas?

15

Are you using an http proxy by chance?

16

It looks like that the pulp3 api bindings use a rubygem called ‘faraday’, which has support for various libraries to actually send http requests. For some reason its selecting a different adapter than we’ve seen before and the adapters are expecting slightly different inputs.

Will update when i know more

17

Thanks, how do I know if I am using the proxy? I installed using:
foreman-installer --scenario katello --foreman-initial-admin-username admin --foreman-initial-admin-password ‘admin’ --enable-foreman-cli-azure --enable-foreman-cli-openscap --enable-foreman-compute-libvirt --enable-foreman-plugin-ansible --enable-foreman-proxy-plugin-ansible --enable-foreman-cli-ansible --enable-foreman-plugin-azure --enable-foreman-plugin-bootdisk --enable-foreman-plugin-openscap --enable-foreman-plugin-remote-execution --enable-foreman-proxy-plugin-remote-execution-ssh --enable-foreman-proxy-plugin-openscap --enable-foreman-compute-ec2 --enable-foreman-plugin-remote-execution-cockpit --enable-foreman-cli-remote-execution --enable-foreman-plugin-bootdisk

18

@Justin_Sherrill Thank you so much for looking into it!

19

You’re not, but i am wondering if one of those plugins that was enabled is overriding the default ‘adapter’ in faraday.

Can you run:

foreman-rake console
Faraday.default_adapter

and provide the output? I’m guessing yours will return ‘excon’, while we’d expect ‘net_http’.

20

[root@foreman ~]# foreman-rake console
Loading production environment (Rails 6.0.3.1)
irb(main):001:0> Faraday.default_adapter
=> :excon
irb(main):002:0>

21

That’s right for me:

irb(main):001:0> Faraday.default_adapter
=> :excon
22

I did some searching/grepping and it looks like the azure plugin the culprit:

/opt/theforeman/tfm/root/usr/share/gems/gems/foreman_azure_rm-2.1.2/lib/foreman_azure_rm/engine.rb:      Faraday::default_adapter=:excon

so anyone that has that plugin installed would likely hit this. Let me see if can make our code compatible with both excon and net_http.

1 Like
23

Should I remove it as it only for testing?

24

@techietubby if you’ve not created any azure compute resources, sure!

25

foreman-installer --no-enable-foreman-plugin-azure --no-enable-foreman-cli-azure

Preparing installation Done
Executing: foreman-rake upgrade:run

Upgrade Step 1/3: katello:correct_repositories. This may take a long while.
Processing Repository 1/1: Centos-7-repo (1)
Repository 1 Missing
Recreating 1
Failed upgrade task: katello:correct_repositories, see logs for more information.

Upgrade Step 2/3: katello:correct_puppet_environments. This may take a long while.

Upgrade Step 3/3: katello:clean_backend_objects. This may take a long while.
0 orphaned consumer id(s) found in candlepin.
Candlepin orphaned consumers:
0 orphaned consumer id(s) found in pulp.
Pulp orphaned consumers:
foreman-rake upgrade:run finished successfully!
Success!

  • Foreman is running at https://foreman.bluefinch.local

  • To install an additional Foreman proxy on separate machine continue by running:

    foreman-proxy-certs-generate --foreman-proxy-fqdn “$FOREMAN_PROXY” --certs-tar “/root/$FOREMAN_PROXY-certs.tar”

  • Foreman Proxy is running at https://foreman.bluefinch.local:9090
    The full log is at /var/log/foreman-installer/katello.log

I then tried to create a new REPO and I still get the Faraday error? I can reinstall without the azure stuff as this is a crash-and-burn machine with snapshots?

26

I’m not sure that running again with --no-enable-foreman-cli-azure actually uninstalls the plugins themselves, you might have to do that manually.

A fresh install might be best?

27

I opened an issue:

and a PR:

We will get that patch into 3.16.1, in the meantime anyone hitting this could try to apply the patch yourself, or install without the azure plugin

1 Like
28

Thank you!

29

Justin, you are a superstar!!
I reinstalled without Azure and it now wors:
yum -y localinstall https://yum.theforeman.org/releases/2.2/el7/x86_64/foreman-release-2.2.0-0.3.rc1.el7.noarch.rpm
yum -y localinstall https://fedorapeople.org/groups/katello/releases/yum/3.17/katello/el7/x86_64/katello-repos-latest.rpm

yum -y install foreman-installer
yum install python2-django tfm-rubygem-hammer_cli_foreman puppet-agent-oauth pulp-server pulp-katello -y --nogpg
yum install katello -y
foreman-installer --scenario katello --foreman-initial-admin-username admin --foreman-initial-admin-password ‘admin’ --enable-foreman-cli-openscap --enable-foreman-compute-libvirt --enable-foreman-plugin-ansible --enable-foreman-proxy-plugin-ansible --enable-foreman-cli-ansible --enable-foreman-plugin-bootdisk --enable-foreman-plugin-openscap --enable-foreman-plugin-remote-execution --enable-foreman-proxy-plugin-remote-execution-ssh --enable-foreman-proxy-plugin-openscap --enable-foreman-compute-ec2 --enable-foreman-plugin-remote-execution-cockpit --enable-foreman-cli-remote-execution --enable-foreman-plugin-bootdisk

yum install foreman-console -y
yum install -y openscap openscap-daemon openscap-scanner openscap puppet-foreman_scap_client-utils
foreman-rake foreman_openscap:bulk_upload:default

30

Awesome! Great to hear!