self signed cert

bogikornel

Hello !

Today I upgraded Xen-Orchestra to the latest master branch and I get the following error message when I create a VPS:

2024-03-18T12:32:19.588Z xo:xapi WARN importVdiContent:  {
  error: Error: self-signed certificate
      at TLSSocket.onConnectSecure (node:_tls_wrap:1550:34)
      at TLSSocket.emit (node:events:514:28)
      at TLSSocket.patchedEmit [as emit] (/home/xo/xen-orchestra/@xen-orchestra/log/configure.js:52:17)
      at TLSSocket._finishInit (node:_tls_wrap:967:8)
      at TLSWrap.ssl.onhandshakedone (node:_tls_wrap:743:12)
      at TLSWrap.callbackTrampoline (node:internal/async_hooks:130:17) {
    code: 'DEPTH_ZERO_SELF_SIGNED_CERT',
    originalUrl: 'https://192.168.200.42/import_raw_vdi/?format=raw&vdi=OpaqueRef%3A1050b49e-be88-413c-87a9-97af88e7ed9f&session_id=OpaqueRef%3A7834cb09-f29d-4cbc-8e29-a125944b9838&task_id=OpaqueRef%3A7248fdf4-ff21-4f78-a9e3-f103eed57c07',
    url: 'https://192.168.200.42/import_raw_vdi/?format=raw&vdi=OpaqueRef%3A1050b49e-be88-413c-87a9-97af88e7ed9f&session_id=OpaqueRef%3A7834cb09-f29d-4cbc-8e29-a125944b9838&task_id=OpaqueRef%3A7248fdf4-ff21-4f78-a9e3-f103eed57c07',

 . . .

john.c

@bogikornel said in self signed cert:

Hello !

Today I upgraded Xen-Orchestra to the latest master branch and I get the following error message when I create a VPS:

2024-03-18T12:32:19.588Z xo:xapi WARN importVdiContent:  {
  error: Error: self-signed certificate
      at TLSSocket.onConnectSecure (node:_tls_wrap:1550:34)
      at TLSSocket.emit (node:events:514:28)
      at TLSSocket.patchedEmit [as emit] (/home/xo/xen-orchestra/@xen-orchestra/log/configure.js:52:17)
      at TLSSocket._finishInit (node:_tls_wrap:967:8)
      at TLSWrap.ssl.onhandshakedone (node:_tls_wrap:743:12)
      at TLSWrap.callbackTrampoline (node:internal/async_hooks:130:17) {
    code: 'DEPTH_ZERO_SELF_SIGNED_CERT',
    originalUrl: 'https://192.168.200.42/import_raw_vdi/?format=raw&vdi=OpaqueRef%3A1050b49e-be88-413c-87a9-97af88e7ed9f&session_id=OpaqueRef%3A7834cb09-f29d-4cbc-8e29-a125944b9838&task_id=OpaqueRef%3A7248fdf4-ff21-4f78-a9e3-f103eed57c07',
    url: 'https://192.168.200.42/import_raw_vdi/?format=raw&vdi=OpaqueRef%3A1050b49e-be88-413c-87a9-97af88e7ed9f&session_id=OpaqueRef%3A7834cb09-f29d-4cbc-8e29-a125944b9838&task_id=OpaqueRef%3A7248fdf4-ff21-4f78-a9e3-f103eed57c07',

 . . .

Can you please provide more information about this issue? Such as the following:-

How obtained Xen Orchestra (XOA or From the Sources)?
What version of Xen Orchestra (version number of XOA or commit from XO From Sources)?
What version of Xen Server or XCP-ng?
What you have tried in order to diagnose this issue and also in attempting to solve it?
Can you provide (attach) any other relevant log files to help get more depth on the issue? Following any appropriate measure in regards to sensitive information.

bogikornel

@john-c

I installed from source
Xen Orchestra, commit 85696
8.2.1
I looked at the log, I didn't try anything.

full log:

márc 18 14:07:08 xoa xo-server[22559]: 2024-03-18T13:07:08.398Z xo:xapi WARN importVdiContent:  {
márc 18 14:07:08 xoa xo-server[22559]:   error: Error: self-signed certificate
márc 18 14:07:08 xoa xo-server[22559]:       at TLSSocket.onConnectSecure (node:_tls_wrap:1550:34)
márc 18 14:07:08 xoa xo-server[22559]:       at TLSSocket.emit (node:events:514:28)
márc 18 14:07:08 xoa xo-server[22559]:       at TLSSocket.patchedEmit [as emit] (/opt/xo/xo-builds/xen-orchestra-202403181341/@xen-orchestra/log/configure.js:52:17)
márc 18 14:07:08 xoa xo-server[22559]:       at TLSSocket._finishInit (node:_tls_wrap:967:8)
márc 18 14:07:08 xoa xo-server[22559]:       at TLSWrap.ssl.onhandshakedone (node:_tls_wrap:743:12)
márc 18 14:07:08 xoa xo-server[22559]:       at TLSWrap.callbackTrampoline (node:internal/async_hooks:130:17) {
márc 18 14:07:08 xoa xo-server[22559]:     code: 'DEPTH_ZERO_SELF_SIGNED_CERT',
márc 18 14:07:08 xoa xo-server[22559]:     originalUrl: 'https://192.168.200.42/import_raw_vdi/?format=raw&vdi=OpaqueRef%3A5dfc22a9-6b39-43f1-9ff5-ec5380deb77f&session_id=OpaqueRef%3Aa71a87ce-8161-47d9-a732-09ac68767b77&task_id=OpaqueRef%3Aaf48a4d5-f585-4081-a4ce-dc8b6d76847c',
márc 18 14:07:08 xoa xo-server[22559]:     url: 'https://192.168.200.42/import_raw_vdi/?format=raw&vdi=OpaqueRef%3A5dfc22a9-6b39-43f1-9ff5-ec5380deb77f&session_id=OpaqueRef%3Aa71a87ce-8161-47d9-a732-09ac68767b77&task_id=OpaqueRef%3Aaf48a4d5-f585-4081-a4ce-dc8b6d76847c',
márc 18 14:07:08 xoa xo-server[22559]:     pool_master: host {
márc 18 14:07:08 xoa xo-server[22559]:       uuid: '4cec7b52-32a0-4bb0-8dcb-20429fd703a2',
márc 18 14:07:08 xoa xo-server[22559]:       name_label: 'testpool-xcpng',
márc 18 14:07:08 xoa xo-server[22559]:       name_description: 'Default install',
márc 18 14:07:08 xoa xo-server[22559]:       memory_overhead: 2050654208,
márc 18 14:07:08 xoa xo-server[22559]:       allowed_operations: [Array],
márc 18 14:07:08 xoa xo-server[22559]:       current_operations: {},
márc 18 14:07:08 xoa xo-server[22559]:       API_version_major: 2,
márc 18 14:07:08 xoa xo-server[22559]:       API_version_minor: 16,
márc 18 14:07:08 xoa xo-server[22559]:       API_version_vendor: 'XenSource',
márc 18 14:07:08 xoa xo-server[22559]:       API_version_vendor_implementation: {},
márc 18 14:07:08 xoa xo-server[22559]:       enabled: true,
márc 18 14:07:08 xoa xo-server[22559]:       software_version: [Object],
márc 18 14:07:08 xoa xo-server[22559]:       other_config: [Object],
márc 18 14:07:08 xoa xo-server[22559]:       capabilities: [Array],
márc 18 14:07:08 xoa xo-server[22559]:       cpu_configuration: {},
márc 18 14:07:08 xoa xo-server[22559]:       sched_policy: 'credit',
márc 18 14:07:08 xoa xo-server[22559]:       supported_bootloaders: [Array],
márc 18 14:07:08 xoa xo-server[22559]:       resident_VMs: [Array],
márc 18 14:07:08 xoa xo-server[22559]:       logging: {},
márc 18 14:07:08 xoa xo-server[22559]:       PIFs: [Array],
márc 18 14:07:08 xoa xo-server[22559]:       suspend_image_sr: 'OpaqueRef:6bee4b3d-5a25-482f-8727-0d6264034bef',
márc 18 14:07:08 xoa xo-server[22559]:       crash_dump_sr: 'OpaqueRef:6bee4b3d-5a25-482f-8727-0d6264034bef',
márc 18 14:07:08 xoa xo-server[22559]:       crashdumps: [],
márc 18 14:07:08 xoa xo-server[22559]:       patches: [],
márc 18 14:07:08 xoa xo-server[22559]:       updates: [],
márc 18 14:07:08 xoa xo-server[22559]:       PBDs: [Array],
márc 18 14:07:08 xoa xo-server[22559]:       host_CPUs: [Array],
márc 18 14:07:08 xoa xo-server[22559]:       cpu_info: [Object],
márc 18 14:07:08 xoa xo-server[22559]:       hostname: 'testpool-xcpng',
márc 18 14:07:08 xoa xo-server[22559]:       address: '192.168.200.42',
márc 18 14:07:08 xoa xo-server[22559]:       metrics: 'OpaqueRef:e108f744-0233-4f77-a8ce-4bf07710e9f8',
márc 18 14:07:08 xoa xo-server[22559]:       license_params: [Object],
márc 18 14:07:08 xoa xo-server[22559]:       ha_statefiles: [],
márc 18 14:07:08 xoa xo-server[22559]:       ha_network_peers: [],
márc 18 14:07:08 xoa xo-server[22559]:       blobs: {},
márc 18 14:07:08 xoa xo-server[22559]:       tags: [],
márc 18 14:07:08 xoa xo-server[22559]:       external_auth_type: '',
márc 18 14:07:08 xoa xo-server[22559]:       external_auth_service_name: '',
márc 18 14:07:08 xoa xo-server[22559]:       external_auth_configuration: {},
márc 18 14:07:08 xoa xo-server[22559]:       edition: 'xcp-ng',
márc 18 14:07:08 xoa xo-server[22559]:       license_server: [Object],
márc 18 14:07:08 xoa xo-server[22559]:       bios_strings: [Object],
márc 18 14:07:08 xoa xo-server[22559]:       power_on_mode: '',
márc 18 14:07:08 xoa xo-server[22559]:       power_on_config: {},
márc 18 14:07:08 xoa xo-server[22559]:       local_cache_sr: 'OpaqueRef:6bee4b3d-5a25-482f-8727-0d6264034bef',
márc 18 14:07:08 xoa xo-server[22559]:       chipset_info: [Object],
márc 18 14:07:08 xoa xo-server[22559]:       PCIs: [Array],
márc 18 14:07:08 xoa xo-server[22559]:       PGPUs: [Array],
márc 18 14:07:08 xoa xo-server[22559]:       PUSBs: [],
márc 18 14:07:08 xoa xo-server[22559]:       ssl_legacy: false,
márc 18 14:07:08 xoa xo-server[22559]:       guest_VCPUs_params: {},
márc 18 14:07:08 xoa xo-server[22559]:       display: 'enabled',
márc 18 14:07:08 xoa xo-server[22559]:       virtual_hardware_platform_versions: [Array],
márc 18 14:07:08 xoa xo-server[22559]:       control_domain: 'OpaqueRef:01867040-9d1c-4604-97fa-f1f7cde6b2f3',
márc 18 14:07:08 xoa xo-server[22559]:       updates_requiring_reboot: [],
márc 18 14:07:08 xoa xo-server[22559]:       features: [],
márc 18 14:07:08 xoa xo-server[22559]:       iscsi_iqn: 'iqn.2022-12.com.example:b6b66d4e',
márc 18 14:07:08 xoa xo-server[22559]:       multipathing: false,
márc 18 14:07:08 xoa xo-server[22559]:       uefi_certificates: '',
márc 18 14:07:08 xoa xo-server[22559]:       certificates: [],
márc 18 14:07:08 xoa xo-server[22559]:       editions: [Array],
márc 18 14:07:08 xoa xo-server[22559]:       https_only: false
márc 18 14:07:08 xoa xo-server[22559]:     },
márc 18 14:07:08 xoa xo-server[22559]:     SR: SR {
márc 18 14:07:08 xoa xo-server[22559]:       uuid: '347ec16f-d788-d2e0-eaf7-4981aae3f352',
márc 18 14:07:08 xoa xo-server[22559]:       name_label: 'Local storage',
márc 18 14:07:08 xoa xo-server[22559]:       name_description: '',
márc 18 14:07:08 xoa xo-server[22559]:       allowed_operations: [Array],
márc 18 14:07:08 xoa xo-server[22559]:       current_operations: {},
márc 18 14:07:08 xoa xo-server[22559]:       VDIs: [Array],
márc 18 14:07:08 xoa xo-server[22559]:       PBDs: [Array],
márc 18 14:07:08 xoa xo-server[22559]:       virtual_allocation: 756061044736,
márc 18 14:07:08 xoa xo-server[22559]:       physical_utilisation: 169835184128,
márc 18 14:07:08 xoa xo-server[22559]:       physical_size: 349799133184,
márc 18 14:07:08 xoa xo-server[22559]:       type: 'ext',
márc 18 14:07:08 xoa xo-server[22559]:       content_type: 'user',
márc 18 14:07:08 xoa xo-server[22559]:       shared: false,
márc 18 14:07:08 xoa xo-server[22559]:       other_config: [Object],
márc 18 14:07:08 xoa xo-server[22559]:       tags: [],
márc 18 14:07:08 xoa xo-server[22559]:       sm_config: [Object],
márc 18 14:07:08 xoa xo-server[22559]:       blobs: {},
márc 18 14:07:08 xoa xo-server[22559]:       local_cache_enabled: true,
márc 18 14:07:08 xoa xo-server[22559]:       introduced_by: 'OpaqueRef:NULL',
márc 18 14:07:08 xoa xo-server[22559]:       clustered: false,
márc 18 14:07:08 xoa xo-server[22559]:       is_tools_sr: false
márc 18 14:07:08 xoa xo-server[22559]:     },
márc 18 14:07:08 xoa xo-server[22559]:     VDI: VDI {
márc 18 14:07:08 xoa xo-server[22559]:       uuid: 'bebc77f5-f68d-4422-8c6d-79b9d230b755',
márc 18 14:07:08 xoa xo-server[22559]:       name_label: 'XO CloudConfigDrive',
márc 18 14:07:08 xoa xo-server[22559]:       name_description: '',
márc 18 14:07:08 xoa xo-server[22559]:       allowed_operations: [Array],
márc 18 14:07:08 xoa xo-server[22559]:       current_operations: {},
márc 18 14:07:08 xoa xo-server[22559]:       SR: 'OpaqueRef:6bee4b3d-5a25-482f-8727-0d6264034bef',
márc 18 14:07:08 xoa xo-server[22559]:       VBDs: [],
márc 18 14:07:08 xoa xo-server[22559]:       crash_dumps: [],
márc 18 14:07:08 xoa xo-server[22559]:       virtual_size: 10485760,
márc 18 14:07:08 xoa xo-server[22559]:       physical_utilisation: 3584,
márc 18 14:07:08 xoa xo-server[22559]:       type: 'user',
márc 18 14:07:08 xoa xo-server[22559]:       sharable: false,
márc 18 14:07:08 xoa xo-server[22559]:       read_only: false,
márc 18 14:07:08 xoa xo-server[22559]:       other_config: {},
márc 18 14:07:08 xoa xo-server[22559]:       storage_lock: false,
márc 18 14:07:08 xoa xo-server[22559]:       location: 'bebc77f5-f68d-4422-8c6d-79b9d230b755',
márc 18 14:07:08 xoa xo-server[22559]:       managed: true,
márc 18 14:07:08 xoa xo-server[22559]:       missing: false,
márc 18 14:07:08 xoa xo-server[22559]:       parent: 'OpaqueRef:NULL',
márc 18 14:07:08 xoa xo-server[22559]:       xenstore_data: {},
márc 18 14:07:08 xoa xo-server[22559]:       sm_config: {},
márc 18 14:07:08 xoa xo-server[22559]:       is_a_snapshot: false,
márc 18 14:07:08 xoa xo-server[22559]:       snapshot_of: 'OpaqueRef:NULL',
márc 18 14:07:08 xoa xo-server[22559]:       snapshots: [],
márc 18 14:07:08 xoa xo-server[22559]:       snapshot_time: '19700101T00:00:00Z',
márc 18 14:07:08 xoa xo-server[22559]:       tags: [],
márc 18 14:07:08 xoa xo-server[22559]:       allow_caching: false,
márc 18 14:07:08 xoa xo-server[22559]:       on_boot: 'persist',
márc 18 14:07:08 xoa xo-server[22559]:       metadata_of_pool: '',
márc 18 14:07:08 xoa xo-server[22559]:       metadata_latest: false,
márc 18 14:07:08 xoa xo-server[22559]:       is_tools_iso: false,
márc 18 14:07:08 xoa xo-server[22559]:       cbt_enabled: false
márc 18 14:07:08 xoa xo-server[22559]:     }
márc 18 14:07:08 xoa xo-server[22559]:   }
márc 18 14:07:08 xoa xo-server[22559]: }

mohammadm

I'm also getting the "self-signed certificate" error sinds the last update.
I get it while trying to import/upload ISO.

From source, commit e52b1
8.3 beta