Foreman upgrade 1.24 to 2.0.1 SSL bug to connect foreman to foreman-proxy

Support
, ,
1

Problem:
After upgrade foreman 1.24 to 2.0.1 foreman could not connect lo foreman-proxy

Expected outcome:
https://foremanfqdn/api/subnets/name/freeip provides new ip
Foreman and Proxy versions:
2.0.1 upgraded from 1.24
Foreman and Proxy plugin versions:

Distribution and version:

Other relevant data:

2020-08-20T18:13:45  [E] <OpenSSL::SSL::SSLError> SSL_accept returned=1 errno=0 state=SSLv3 read client certificate A: tlsv1 alert internal error
/opt/rh/rh-ruby25/root/usr/share/ruby/webrick/server.rb:299:in `accept'
/opt/rh/rh-ruby25/root/usr/share/ruby/webrick/server.rb:299:in `block (2 levels) in start_thread'
/opt/rh/rh-ruby25/root/usr/share/ruby/webrick/utils.rb:263:in `timeout'
/opt/rh/rh-ruby25/root/usr/share/ruby/webrick/server.rb:297:in `block in start_thread'
/opt/theforeman/tfm/root/usr/share/gems/gems/logging-2.2.2/lib/logging/diagnostic_context.rb:474:in `block in create_with_logging_context'

2020-08-20T18:13:45 [D] close: ::1:44022
2020-08-20T18:13:47 [D] accept: ::1:44024
Failure: ERF50-5345 [Foreman::WrappedException]: Unable to connect ([ProxyAPI::ProxyException]: ERF12-7885 [ProxyAPI::ProxyException]: Unable to fetch logs ([RestClient::SSLCertificateNotVerified]: SSL_connect returned=1 errno=0 state=error: certificate verify failed (error number 1)) for proxy https://:8443/logs)
([RestClient::SSLCertificateNotVerified]: SSL_connect returned=1 errno=0 state=error: certificate verify failed (error number 1)) for proxy https://host:8443/dhcp"

2

After running
“foreman-installer -i” (without any changes in config) foreman-proxy becomes visible for foreman.
Its status in Infrastructure\Smart proxies is Active.
But attempts to get free ip by https://foremanfqdn/api/subnets/name/freeip are failed.

Failed to fetch a free IP from proxy foreman-fqdn (https://foreman-fqdn:8443): ERF12-8202 [ProxyAPI::ProxyException]: Unable to retrieve unused IP ([RestClient::NotFound]: 404 Not Found) for proxy https://foreman-fqdn:8443/dhcp
3

Access permissions:
[root@foreman~]# getfacl /etc/dhcp /var/lib/dhcpd

file: etc/dhcp

owner: root

group: root

user::rwx
user:foreman-proxy:rwx
user:foreman:rwx
group::r-x
mask::rwx
other::r-x

file: var/lib/dhcpd

owner: dhcpd

group: dhcpd

user::rwx
user:foreman-proxy:rwx
user:foreman:rwx
group::r-x
mask::rwx
other::r-x

4 
Sep  9 16:30:53 foreman smart-proxy: 127.0.0.1 - - [09/Sep/2020:16:30:53 +03] "GET /dhcp/172.20.*.0/unused_ip?from=172.20.*.5&to=172.20.*.253 HTTP/1.1" 404 35

2020-09-09T16:11:14 27995181 [I] Started GET /dhcp/172.20.*.0/unused_ip from=172.20.*.5&to=172.20.*.253

2020-09-09T16:11:14 27995181 [E] Subnet 172.20..0 could not found
2020-09-09T16:11:14 27995181 [W] Subnet 172.20..0 could not found
Exception: Subnet 172.20.*.0 could not found