Alon Bar-Lev has uploaded a new change for review.
Change subject: pki: remove database config upgrade
......................................................................
pki: remove database config upgrade
BACKGROUND
There is a bug in engine-config that existed since beginning of time, it
does not take the CABaseDirectory into account.
However, both the setup and the upgrade set full path for all pki
artifacts, this is why this bug has been never discovered.
DESCRIPTION
The database upgrade script puts two values per default, these are
relative:
select
fn_db_update_config_value('keystoreUrl','keys/engine.p12','general');
select
fn_db_update_config_value('TruststoreUrl','.truststore','general');
When system is upgraded from 3.1, after database upgrade the
engine-upgrade script will convert keys to PKCS#12 format, and overwrite
database settings.
However, if you upgrade from 3.2 to 3.2, then the engine-upgrade script
does not overwrite the setting, leaving relative paths.
WORKAROUND
Modify keystoreUrl and truststoreUrl within database to absolute paths.
Change-Id: Iec8bb367033b5ec03b5b97bd183fc5683523ccd9
Bug-Url: https://bugzilla.redhat.com/show_bug.cgi?id=968906
Signed-off-by: Alon Bar-Lev <[email protected]>
---
M backend/manager/dbscripts/upgrade/pre_upgrade/0000_config.sql
1 file changed, 0 insertions(+), 2 deletions(-)
git pull ssh://gerrit.ovirt.org:29418/ovirt-engine refs/changes/84/15184/1
diff --git a/backend/manager/dbscripts/upgrade/pre_upgrade/0000_config.sql
b/backend/manager/dbscripts/upgrade/pre_upgrade/0000_config.sql
index 438dc3c..e8e1ef4 100644
--- a/backend/manager/dbscripts/upgrade/pre_upgrade/0000_config.sql
+++ b/backend/manager/dbscripts/upgrade/pre_upgrade/0000_config.sql
@@ -523,7 +523,6 @@
COMMIT
','general');
select
fn_db_update_config_value('IsMultilevelAdministrationOn','true','general');
-select fn_db_update_config_value('keystoreUrl','keys/engine.p12','general');
select fn_db_update_config_value('MaxNumOfVmCpus','64','3.0');
select fn_db_update_config_value('MaxNumOfVmCpus','160','3.1');
select fn_db_update_config_value('MaxNumOfVmCpus','160','3.2');
@@ -542,7 +541,6 @@
select
fn_db_update_config_value('SupportedClusterLevels','3.0,3.1,3.2','general');
select fn_db_update_config_value('SupportedStorageFormats','0,2,3','3.1');
select fn_db_update_config_value('SupportedVDSMVersions','4.9,4.10','general');
-select fn_db_update_config_value('TruststoreUrl','.truststore','general');
select fn_db_update_config_value('VdcVersion','3.2.0.0','general');
select fn_db_update_config_value('ProductRPMVersion','3.2.0.0','general');
select
fn_db_update_config_value('VdsFenceOptionMapping','alom:secure=secure,port=ipport;apc:secure=secure,port=ipport,slot=port;bladecenter:secure=secure,port=ipport,slot=port;cisco_ucs:secure=ssl,slot=port;drac5:secure=secure,slot=port;eps:slot=port;ilo:secure=ssl,port=ipport;ipmilan:;ilo2:secure=ssl,port=ipport;ipmilan:;ilo3:;ilo4:;rsa:secure=secure,port=ipport;rsb:;wti:secure=secure,port=ipport,slot=port','general');
--
To view, visit http://gerrit.ovirt.org/15184
To unsubscribe, visit http://gerrit.ovirt.org/settings
Gerrit-MessageType: newchange
Gerrit-Change-Id: Iec8bb367033b5ec03b5b97bd183fc5683523ccd9
Gerrit-PatchSet: 1
Gerrit-Project: ovirt-engine
Gerrit-Branch: engine_3.2
Gerrit-Owner: Alon Bar-Lev <[email protected]>
_______________________________________________
Engine-patches mailing list
[email protected]
http://lists.ovirt.org/mailman/listinfo/engine-patches
