[opensuse-buildservice] problems after obs migration
Hi, testing a migration of an obs 2.6 instance from SLE_11 to a SLE_12 host. I installed all needed packages configured services and enabled them. I dumped and recoverd the database. I synced the /srv/obs DIR I adapted the /usr/lib/obs/server/BSConfig.pm I adapted the /srv/www/obs/api/config/database.yml I adapted the /srv/www/obs/api/config/options.yml The 'anonymous' browsing on the webui works just fine. https://build.de.scorpio-it.net/ but I can't login. getting a 500 could need some help please ... --- production.log - snip --- [27740a07-6bdd-49ae-afd8-490ecb58a6eb] [6367:308.19] Started POST "/user/do_login" for 192.168.101.8 at 2016-08-15 23:44:22 +0000 [27740a07-6bdd-49ae-afd8-490ecb58a6eb] [6367:308.19] Processing by Webui::UserController#do_login as HTML [27740a07-6bdd-49ae-afd8-490ecb58a6eb] [6367:308.19] Parameters: {"utf8"=>"✓", "authenticity_token"=>"_removed_=", "username"=>"_replaced_", "password"=>"[FILTERED]", "commit"=>"Log In"} [27740a07-6bdd-49ae-afd8-490ecb58a6eb] [6367:308.19] Anonymous request to 'https://build.de.scorpio-it.net/user/do_login' [27740a07-6bdd-49ae-afd8-490ecb58a6eb] [6367:308.21] Completed 500 Internal Server Error in 18ms (ActiveRecord: 0.7ms | Backend: 0.0ms | XML: 0.0ms) [27740a07-6bdd-49ae-afd8-490ecb58a6eb] [6367:308.22] OpenSSL::SSL::SSLError (SSL_connect returned=1 errno=0 state=SSLv3 read server certificate B: certificate verify failed): /usr/lib64/ruby/2.1.0/net/http.rb:920:in `connect' /usr/lib64/ruby/2.1.0/net/http.rb:920:in `block in connect' /usr/lib64/ruby/2.1.0/timeout.rb:76:in `timeout' /usr/lib64/ruby/2.1.0/net/http.rb:920:in `connect' /usr/lib64/ruby/2.1.0/net/http.rb:863:in `do_start' /usr/lib64/ruby/2.1.0/net/http.rb:858:in `start' ... --- snip --- What is wrong ? What did I forget ? Thank you -- Christian ---------------------------------------------------- - Please do not 'CC' me on list mails. Just reply to the list :) ---------------------------------------------------- Der ultimative shop für Sportbekleidung und Zubehör http://www.sc24.de ----------------------------------------------------
On Dienstag, 16. August 2016, 01:56:42 CEST wrote Christian:
Hi,
testing a migration of an obs 2.6 instance from SLE_11 to a SLE_12 host.
I installed all needed packages configured services and enabled them. I dumped and recoverd the database. I synced the /srv/obs DIR I adapted the /usr/lib/obs/server/BSConfig.pm I adapted the /srv/www/obs/api/config/database.yml I adapted the /srv/www/obs/api/config/options.yml
The 'anonymous' browsing on the webui works just fine. https://build.de.scorpio-it.net/
but I can't login. getting a 500 could need some help please ...
--- production.log - snip --- [27740a07-6bdd-49ae-afd8-490ecb58a6eb] [6367:308.19] Started POST "/user/do_login" for 192.168.101.8 at 2016-08-15 23:44:22 +0000 [27740a07-6bdd-49ae-afd8-490ecb58a6eb] [6367:308.19] Processing by Webui::UserController#do_login as HTML [27740a07-6bdd-49ae-afd8-490ecb58a6eb] [6367:308.19] Parameters: {"utf8"=>"✓", "authenticity_token"=>"_removed_=", "username"=>"_replaced_", "password"=>"[FILTERED]", "commit"=>"Log In"} [27740a07-6bdd-49ae-afd8-490ecb58a6eb] [6367:308.19] Anonymous request to 'https://build.de.scorpio-it.net/user/do_login' [27740a07-6bdd-49ae-afd8-490ecb58a6eb] [6367:308.21] Completed 500 Internal Server Error in 18ms (ActiveRecord: 0.7ms | Backend: 0.0ms | XML: 0.0ms) [27740a07-6bdd-49ae-afd8-490ecb58a6eb] [6367:308.22] OpenSSL::SSL::SSLError (SSL_connect returned=1 errno=0 state=SSLv3 read server certificate B: certificate verify failed): /usr/lib64/ruby/2.1.0/net/http.rb:920:in `connect' /usr/lib64/ruby/2.1.0/net/http.rb:920:in `block in connect' /usr/lib64/ruby/2.1.0/timeout.rb:76:in `timeout' /usr/lib64/ruby/2.1.0/net/http.rb:920:in `connect' /usr/lib64/ruby/2.1.0/net/http.rb:863:in `do_start' /usr/lib64/ruby/2.1.0/net/http.rb:858:in `start' ... --- snip ---
What is wrong ? What did I forget ?
The ruby stack is not trusting your SSL certificate. In 2.6 the webui is still doing connections to the api for login verification and needs to trust it. So, either update to 2.7 where this isn't a case anymore or teach ruby to trust the certificate. -- Adrian Schroeter email: adrian@suse.de SUSE Linux GmbH, GF: Felix Imendörffer, Jane Smithard, Graham Norton, HRB 21284 (AG Nürnberg) Maxfeldstraße 5 90409 Nürnberg Germany -- To unsubscribe, e-mail: opensuse-buildservice+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-buildservice+owner@opensuse.org
Am 16.08.2016 um 08:38 schrieb Adrian Schröter:
The ruby stack is not trusting your SSL certificate. In 2.6 the webui is still doing connections to the api for login verification and needs to trust it.
Didn't had this problem on the the SLE_11 box with obs 2.6 ... :(
So, either update to 2.7 where this isn't a case anymore or teach ruby to trust the certificate.
hmmm ... I already added my CAcerts to /etc/ssl/certs. That seem not to be enough ... :( How can I tell ruby to trust my cert ? Thanks in Advance :) -- Christian ---------------------------------------------------- - Please do not 'CC' me on list mails. Just reply to the list :) ---------------------------------------------------- Der ultimative shop für Sportbekleidung und Zubehör http://www.sc24.de ---------------------------------------------------- -- To unsubscribe, e-mail: opensuse-buildservice+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-buildservice+owner@opensuse.org
Am 16.08.2016 um 08:38 schrieb Adrian Schröter:
The ruby stack is not trusting your SSL certificate. In 2.6 the webui is still doing connections to the api for login verification and needs to trust it.
So, either update to 2.7 where this isn't a case anymore or teach ruby to trust the certificate.
I did the upgrade to 2.7.1. Everything seem to work fine despite my 'Maintenance Project' on my previous box (SLE_11, 2.6) I used it and prepared 3 maintenance packages without any problem. I did: osc -A obs mbranch phpMyAdmin which ends up in: https://build.de.scorpio-it.net/project/show/home:admin:branches:OBS_Maintai... I did the updates, added the patchinfo (like I did with the 3 previous) Ususally its now time to sumbit but in the webui the 'submit as update' is missing. Did I forget something in the migration ? Thanks in advance -- Christian ---------------------------------------------------- - Please do not 'CC' me on list mails. Just reply to the list :) ---------------------------------------------------- Der ultimative shop für Sportbekleidung und Zubehör http://www.sc24.de ---------------------------------------------------- -- To unsubscribe, e-mail: opensuse-buildservice+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-buildservice+owner@opensuse.org
participants (2)
-
Adrian Schröter -
Christian