[Katello] Pulp SSL error after upgrade 3.2 -> 3.3

Support
1

Hi

I upgraded Katello from 3.2 to 3.3. Upgrade went fine, without any errors.
However after upgrade Pulp does not work anymore and I can't sync any repos:

==> /var/log/foreman/production.log <==
2017-02-17 11:47:23 [app] [W] SSL_connect returned=1 errno=0 state=SSLv3
read server certificate B: certificate verify failed
…
2017-02-17 11:47:23 [app] [W] Skipped pulp_auth check after failed pulp
check

…
2017-02-17 11:47:23 [foreman-tasks/action] [E] There was an issue with the
backend service pulp: SSL_connect returned=1 errno=0 state=SSLv3 read
server certificate B: certificate verify failed (RuntimeError)

…
2017-02-17 11:47:23 [foreman-tasks/action] [E] A sub task failed (
RuntimeError)

Any ideas?

Edgars

2

Hi Edgars,

Can you check your /etc/foreman/plugins/katello.yaml settings file to see
if the :pulp section of the config has an entry for the CA cert?

Eric

··· On Feb 17, 2017 6:40 AM, "Edgars M." wrote:

Hi

I upgraded Katello from 3.2 to 3.3. Upgrade went fine, without any errors.
However after upgrade Pulp does not work anymore and I can’t sync any repos:

==> /var/log/foreman/production.log <==
2017-02-17 11:47:23 [app] [W] SSL_connect returned=1 errno=0 state=SSLv3
read server certificate B: certificate verify failed
…
2017-02-17 11:47:23 [app] [W] Skipped pulp_auth check after failed pulp
check

…
2017-02-17 11:47:23 [foreman-tasks/action] [E] There was an issue with the
backend service pulp: SSL_connect returned=1 errno=0 state=SSLv3 read
server certificate B: certificate verify failed (RuntimeError)

…
2017-02-17 11:47:23 [foreman-tasks/action] [E] A sub task failed (
RuntimeError)

Any ideas?

Edgars

–
You received this message because you are subscribed to the Google Groups
"Foreman users" group.
To unsubscribe from this group and stop receiving emails from it, send an
email to foreman-users+unsubscribe@googlegroups.com.
To post to this group, send email to foreman-users@googlegroups.com.
Visit this group at https://groups.google.com/group/foreman-users.
For more options, visit https://groups.google.com/d/optout.

3

I upgraded Katello to version 3.3.1 and this issue is solved now.

Edgars

piektdiena, 2017. gada 17. februāris 12:39:59 UTC+1, Edgars M. rakstīja:

··· > > Hi > > I upgraded Katello from 3.2 to 3.3. Upgrade went fine, without any errors. > However after upgrade Pulp does not work anymore and I can't sync any repos: > > > ==> /var/log/foreman/production.log <== > 2017-02-17 11:47:23 [app] [W] SSL_connect returned=1 errno=0 state=SSLv3 > read server certificate B: certificate verify failed > ... > 2017-02-17 11:47:23 [app] [W] Skipped pulp_auth check after failed pulp > check > > ... > 2017-02-17 11:47:23 [foreman-tasks/action] [E] There was an issue with > the backend service pulp: SSL_connect returned=1 errno=0 state=SSLv3 read > server certificate B: certificate verify failed (RuntimeError) > > ... > 2017-02-17 11:47:23 [foreman-tasks/action] [E] A sub task failed ( > RuntimeError) > > > > Any ideas? > > Edgars >
4

Hi Eric

I had to revert back to version 3.2 so I cannot check that file after
upgrade. However in current running version 3.2 pulp section looks like
this:

:pulp:
:url: https://katello-server/pulp/api/v2/
:oauth_key: katello
:oauth_secret: XXX

So, there is no entry for CA cert, but it work just fine in 3.2

Edgars

sestdiena, 2017. gada 18. februāris 03:42:25 UTC+1, Eric Helms rakstīja:

··· > > Hi Edgars, > > Can you check your /etc/foreman/plugins/katello.yaml settings file to see > if the :pulp section of the config has an entry for the CA cert? > > > Eric > > On Feb 17, 2017 6:40 AM, "Edgars M." <edgars...@gmail.com > > wrote: > > Hi > > I upgraded Katello from 3.2 to 3.3. Upgrade went fine, without any errors. > However after upgrade Pulp does not work anymore and I can't sync any repos: > > > ==> /var/log/foreman/production.log <== > 2017-02-17 11:47:23 [app] [W] SSL_connect returned=1 errno=0 state=SSLv3 > read server certificate B: certificate verify failed > ... > 2017-02-17 11:47:23 [app] [W] Skipped pulp_auth check after failed pulp > check > > ... > 2017-02-17 11:47:23 [foreman-tasks/action] [E] There was an issue with > the backend service pulp: SSL_connect returned=1 errno=0 state=SSLv3 read > server certificate B: certificate verify failed (RuntimeError) > > ... > 2017-02-17 11:47:23 [foreman-tasks/action] [E] A sub task failed ( > RuntimeError) > > > > Any ideas? > > Edgars > > -- > You received this message because you are subscribed to the Google Groups > "Foreman users" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to foreman-user...@googlegroups.com . > To post to this group, send email to forema...@googlegroups.com > . > Visit this group at https://groups.google.com/group/foreman-users. > For more options, visit https://groups.google.com/d/optout. > > >