bug: fail to download a template from https

[tampler]

ISSUE TYPE

• Bug Report

COMPONENT NAME

Core, GUI, API

CLOUDSTACK VERSION

CloudStack 4.17.0.0-snapshot.20220325 

CONFIGURATION

Advanced network with VPC
KVM

OS / ENVIRONMENT

Ubuntu 22.04

SUMMARY

I'm using a QCOW2 image template. When I install it from a http location, all works. When I setup my reverse proxy to use https (with support of tls1.2 and tls1.3, I'm getting an error: Received fatal alert: internal_error

Log is here management-server.log

STEPS TO REPRODUCE

EXPECTED RESULTS

Download and install template from `http` and `https`

ACTUAL RESULTS

Can download a template from `http` only

[nvazquez]

Hi @tampler can you upload the SSVM logs as well?

[nvazquez]

Also - does this mean you are running the code from main at 25/03? (CloudStack 4.17.0.0-snapshot.20220325). If that is the case please upgrade your packages to use the latest code from main branch - please note this fix #6371 was introduced after RC2 so please do not consider RC2 either for your testing)

[tampler]

Hi @nvazquez

Yes, I used a nightly build for 4.17 back then (Mar 25 2022) to setup a test env. Do you want me to try with the latest nightly for 4.17 or 4.16 ? 🤔

[nvazquez]

@tampler thanks, latest nightly packages for 4.17 should be fine. You may also need the latest system VM template and recreate your system VMs

[tampler]

Hmmm 🤔 The latest system VM template 🙄 ? I install what comes with the nightly pkg and never bother with customization. Should that be enough if I install all stuff from nightly?

[nvazquez]

Sure - the packages include the system VM templates, that should work if rebuild from scratch

[nvazquez]

Hi @tampler please confirm if the issue persists after rebuilding with the latest packages

[weizhouapache]

@tampler
have you tested latest 4.17.0.0 RC3 ?

do you use self-signed certificate ?

[tampler]

Hi @weizhouapache

1. Not yet tested. I'll be using the latest nightly. Sorry for the delay - our test env is being used and I need more time
2. No, I'm using and ext authority and set up ACS behind a reverse proxy

PS: And yes, other https services behind it work well

[tampler]

I was unable to install ACS nightly 4.17.0.0 as of Jun 3 2022 on Ubuntu 22.04.
cloudstack-setup-management fails with this:

DEBUG:root:execute:uname -m
DEBUG:root:execute:hostname -f
DEBUG:root:execute:touch /var/run/cloudstack-management.pid
DEBUG:root:execute:chown cloud.cloud /var/run/cloudstack-management.pid
DEBUG:root:execute:hostname --fqdn
DEBUG:root:execute:mkdir -p /var/lib/cloudstack/
DEBUG:root:execute:chown cloud:cloud -R /var/lib/cloudstack/
DEBUG:root:execute:sudo /usr/sbin/service cloudstack-management status
DEBUG:root:execute:sudo /usr/sbin/service cloudstack-management stop
DEBUG:root:execute:sudo update-rc.d -f cloudstack-management remove
DEBUG:root:execute:sudo update-rc.d -f cloudstack-management defaults
DEBUG:root:Failed to execute:update-rc.d: error: unable to read /etc/init.d/cloudstack-management
DEBUG:root:execute:sudo /usr/sbin/service cloudstack-management status
DEBUG:root:Failed to execute:x cloudstack-management.service - CloudStack Management Server
     Loaded: loaded (/lib/systemd/system/cloudstack-management.service; enabled; vendor preset: enabled)
     Active: failed (Result: exit-code) since Fri 2022-06-03 12:41:01 UTC; 649ms ago
   Main PID: 116513 (code=exited, status=143)
        CPU: 19.150s

Jun 03 12:35:19 mgmt java[116513]: WARNING: An illegal reflective access operation has occurred
Jun 03 12:35:19 mgmt java[116513]: WARNING: Illegal reflective access by net.sf.cglib.core.ReflectUtils$1 (file:/usr/share/cloudstack-management/lib/cloudsta>
Jun 03 12:35:19 mgmt java[116513]: WARNING: Please consider reporting this to the maintainers of net.sf.cglib.core.ReflectUtils$1
Jun 03 12:35:19 mgmt java[116513]: WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations
Jun 03 12:35:19 mgmt java[116513]: WARNING: All illegal access operations will be denied in a future release
Jun 03 12:41:01 mgmt systemd[1]: Stopping CloudStack Management Server...

Falling back to 4.16.2.0 to try this out