<html><head><title></title></head><body><div class="rte-style-maintainer rte-pre-wrap" data-color="global-default" bbg-color="default" data-bb-font-size="medium"bbg-font-size="medium" style="white-space: pre-wrap; font-size: small; font-family: "Courier New", Courier, "BB.FixedWidth";"style="white-space: pre-wrap; font-size: small; font-family: "Courier New", Courier, "BB.FixedWidth"; color: rgb(0, 0, 0);">Thanks. I am now getting a different error. Please advise<div><br></div><div> "_href": "/pulp/api/v3/tasks/fcc679b8-1ad3-4a16-834b-47b946caaeed/", </div><div> "created_resources": [], </div><div> "error": {</div><div> "code": null, </div><div> "description": "Cannot connect to host cdn.redhat.com:443 ssl:None [Connect call failed ('23.65.16.251', 443)]", </div><div> "traceback": " File \"/opt/python/3.6.5/lib/python3.6/site-packages/rq/worker.py\", line 812, in perform_job\n rv = job.perform()\n File \"/opt/python/3.6.5/lib/python3.6/site-packages/rq/job.py\", line 588, in perform\n self._result = self._execute()\n File \"/opt/python/3.6.5/lib/python3.6/site-packages/rq/job.py\", line 594, in _execute\n return self.func(*self.args, **self.kwargs)\n File \"/tmp/pulp_rpm/pulp_rpm/app/tasks/synchronizing.py\", line 67, in synchronize\n dv.create()\n File \"/tmp/pulpcore-plugin/pulpcore/plugin/stages/declarative_version.py\", line 169, in create\n loop.run_until_complete(pipeline)\n File \"/opt/python/3.6.5/lib64/python3.6/asyncio/base_events.py\", line 468, in run_until_complete\n return future.result()\n File \"/tmp/pulpcore-plugin/pulpcore/plugin/stages/api.py\", line 209, in create_pipeline\n await asyncio.gather(*futures)\n File \"/tmp/pulpcore-plugin/pulpcore/plugin/stages/api.py\", line 43, in __call__\n await self.run()\n File \"/tmp/pulp_rpm/pulp_rpm/app/tasks/synchronizing.py\", line 231, in run\n result = await downloader.run()\n File \"/tmp/pulpcore-plugin/pulpcore/plugin/download/base.py\", line 212, in run\n return await self._run(extra_data=extra_data)\n File \"/opt/python/3.6.5/lib/python3.6/site-packages/backoff/_async.py\", line 131, in retry\n ret = await target(*args, **kwargs)\n File \"/tmp/pulpcore-plugin/pulpcore/plugin/download/http.py\", line 182, in _run\n async with self.session.get(self.url) as response:\n File \"/opt/python/3.6.5/lib64/python3.6/site-packages/aiohttp/client.py\", line 1005, in __aenter__\n self._resp = await self._coro\n File \"/opt/python/3.6.5/lib64/python3.6/site-packages/aiohttp/client.py\", line 476, in _request\n timeout=real_timeout\n File \"/opt/python/3.6.5/lib64/python3.6/site-packages/aiohttp/connector.py\", line 522, in connect\n proto = await self._create_connection(req, traces, timeout)\n File \"/opt/python/3.6.5/lib64/python3.6/site-packages/aiohttp/connector.py\", line 854, in _create_connection\n req, traces, timeout)\n File \"/opt/python/3.6.5/lib64/python3.6/site-packages/aiohttp/connector.py\", line 992, in _create_direct_connection\n raise last_exc\n File \"/opt/python/3.6.5/lib64/python3.6/site-packages/aiohttp/connector.py\", line 974, in _create_direct_connection\n req=req, client_error=client_error)\n File \"/opt/python/3.6.5/lib64/python3.6/site-packages/aiohttp/connector.py\", line 931, in _wrap_create_connection\n raise client_error(req.connection_key, exc) from exc\n"</div><div> }, </div><div><br></div><div><br></div><div>I was able to connect using client cert through proxy</div><div> # curl -Iv --cacert /etc/rhsm/ca/redhat-uep.pem --key /etc/pki/entitlement/8521692907269500331-key.pem --cert /etc/pki/entitlement/8521692907269500331.pem <a spellcheck="false"bbg-destination="rte:bind" data-destination="rte:bind" href="https://cdn.redhat.com/content/dist/rhel/server/7/7Server/x86_64/os/">https://cdn.redhat.com/content/dist/rhel/server/7/7Server/x86_64/os/</a></div><div>* About to connect() to proxy ... port ... (#0)</div><div>* Trying ...</div><div>* Connected to ... () port ... (#0)</div><div>* Establish HTTP proxy tunnel to cdn.redhat.com:443</div><div>> CONNECT cdn.redhat.com:443 HTTP/1.1</div><div>> Host: cdn.redhat.com:443</div><div>> User-Agent: curl/7.29.0</div><div>> Proxy-Connection: Keep-Alive</div><div>> </div><div>< HTTP/1.1 200 Connection established</div><div>HTTP/1.1 200 Connection established</div><div>< </div><div><br></div><div>* Proxy replied OK to CONNECT request</div><div>* Initializing NSS with certpath: sql:/etc/pki/nssdb</div><div><br><br><div class="rte-style-maintainer" data-color="global-default"bbg-color="default" data-bb-font-size="medium" bbg-font-size="medium" style="font-size: small; font-family: "Courier New", Courier, "BB.FixedWidth";"style="font-size: small; font-family: "Courier New", Courier, "BB.FixedWidth"; color: rgb(0, 0, 0);"><div><div class="bbg-rte-fold-content" data-header="From: dkliban@redhat.com At: 06/20/19 16:34:40" data-digest="From: dkliban@redhat.com At: 06/20/19 16:34:40" style=""><div class="bbg-rte-fold-summary">From: dkliban@redhat.com At: 06/20/19 16:34:40</div>To: <a spellcheck="false" bbg-destination="mailto:bli111@bloomberg.net" href="mailto:bli111@bloomberg.net"> Bin Li (BLOOMBERG/ 120 PARK ) </a><br>Cc: <a spellcheck="false"bbg-destination="mailto:pulp-list@redhat.com" href="mailto:pulp-list@redhat.com"> pulp-list@redhat.com</a><br>Subject: Re: [Pulp-list] create remote to redhat on pulp 3</div><br></div><div class="rte-internet-block-wrapper" style="background: white; color: black; font-family: Arial, "BB.Proportional"; font-size: small; white-space: normal;"><div class="rte-internet-block"><blockquote><div dir="ltr">You need to make sure that the following services are running: pulp-resource-manager, pulp-worker@0, pulp-worker@1 (at least 1 worker is needed). <br></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Thu, Jun 20, 2019 at 4:11 PM Bin Li (BLOOMBERG/ 120 PARK) <<a spellcheck="false"bbg-destination="mailto:rte:bind" class="" href="mailto:bli111@bloomberg.net" data-destination="mailto:rte:bind">bli111@bloomberg.net</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div><div class="gmail-m_6618610937059462134rte-style-maintainer gmail-m_6618610937059462134rte-pre-wrap"style="white-space: pre-wrap; font-size: small; font-family: "Courier New", Courier, "BB.FixedWidth";">I installed the latest version of component. No more errors when try to sync the repo but the task is in waiting state forever. Any idea what I should check?<div><br></div><div> "versions": [</div><div> {</div><div> "component": "pulpcore", </div><div> "version": "3.0.0rc3.dev0"</div><div> }, </div><div> {</div><div> "component": "pulpcore-plugin", </div><div> "version": "0.1.0rc3.dev0"</div><div> }, </div><div> {</div><div> "component": "pulp_rpm", </div><div> "version": "3.0.0b4.dev0"</div><div> }</div><div><br><div><br><br><div class="gmail-m_6618610937059462134rte-style-maintainer" style="font-size: small; font-family: "Courier New", Courier, "BB.FixedWidth";"><div><div class="gmail-m_6618610937059462134bbg-rte-fold-content"><div class="gmail-m_6618610937059462134bbg-rte-fold-summary">From: <a spellcheck="false"bbg-destination="mailto:rte:bind" class="" href="mailto:dkliban@redhat.com" data-destination="mailto:rte:bind">dkliban@redhat.com</a> At: 06/18/19 13:42:01</div>To: <a spellcheck="false" bbg-destination="mailto:bli111@bloomberg.net" class="" href="mailto:bli111@bloomberg.net" data-destination="mailto:bli111@bloomberg.net"> Bin Li (BLOOMBERG/ 120 PARK ) </a><br>Cc: <a spellcheck="false"bbg-destination="mailto:pulp-list@redhat.com" class="" href="mailto:pulp-list@redhat.com" data-destination="mailto:pulp-list@redhat.com"> pulp-list@redhat.com</a><br>Subject: Re: [Pulp-list] create remote to redhat on pulp 3</div><br></div><div class="gmail-m_6618610937059462134rte-internet-block-wrapper"style="background: none 0% 0% repeat scroll white; color: black; font-family: Arial, "BB.Proportional"; font-size: small; white-space: normal;"><div class="gmail-m_6618610937059462134rte-internet-block"><blockquote><div dir="ltr"><div>This issue has now been resolved and a fix is available on master branch of pulpcore-plugin[0]. </div><div><br></div><div><br></div><div>[0] <a spellcheck="false" bbg-destination="rte:bind" class=""href="https://github.com/pulp/pulpcore-plugin/tree/master/"data-destination="rte:bind">https://github.com/pulp/pulpcore-plugin/tree/master/</a></div></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Wed, Jun 12, 2019 at 1:51 PM Dennis Kliban <<a spellcheck="false"bbg-destination="mailto:rte:bind" class="" href="mailto:dkliban@redhat.com" data-destination="mailto:rte:bind">dkliban@redhat.com</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div dir="ltr"><div>There is an open issue about this[0]. I recommend clicking the watch button so you get notifications about it. We should be fixing this soon. <br></div><div><br></div><div>[0] <a spellcheck="false" bbg-destination="rte:bind" class=""href="https://pulp.plan.io/issues/4825" data-destination="rte:bind">https://pulp.plan.io/issues/4825</a></div></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Wed, Jun 12, 2019 at 1:42 PM Bin Li (BLOOMBERG/ 120 PARK) <<a spellcheck="false"bbg-destination="mailto:rte:bind" class="" href="mailto:bli111@bloomberg.net" data-destination="mailto:rte:bind">bli111@bloomberg.net</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div><div class="gmail-m_6618610937059462134gmail-m_-1423717654734810632gmail-m_-5849831393299595243rte-style-maintainer gmail-m_6618610937059462134gmail-m_-1423717654734810632gmail-m_-5849831393299595243rte-pre-wrap"style="white-space: pre-wrap; font-size: small; font-family: "Courier New", Courier, "BB.FixedWidth";"><br><div class="gmail-m_6618610937059462134gmail-m_-1423717654734810632gmail-m_-5849831393299595243rte-style-maintainer gmail-m_6618610937059462134gmail-m_-1423717654734810632gmail-m_-5849831393299595243rte-pre-wrap"style="white-space: pre-wrap; font-size: small; font-family: "Courier New", Courier, "BB.FixedWidth";">I was not able to sync a protected repo from redhat. The host running pulp 3 subscribes to redhat directly.<div><br></div><div>I first tried to use the following to create remote:<div>{</div><div>"name": "rhel-x86_64-server-7",</div><div>"url": "<a spellcheck="false" bbg-destination="rte:bind"class="" href="https://cdn.redhat.com/content/dist/rhel/server/7/7Server/x86_64/os"data-destination="rte:bind">https://cdn.redhat.com/content/dist/rhel/server/7/7Server/x86_64/os</a>",</div><div>"ssl_ca_certificate": "/etc/rhsm/ca/redhat-uep.pem",</div><div>"ssl_client_certificate": "/etc/pki/consumer/cert.pem", </div><div>"ssl_client_key": "/etc/pki/consumer/key.pem",</div><div>"ssl_validation": true,</div><div>"proxy_url": "<a spellcheck="false" bbg-destination="rte:bind"class="" href="http://proxy:80" data-destination="rte:bind">http://proxy:80</a>",</div><div>"download_concurrency": 1,</div><div>"policy": "immediate"</div><div>} </div><div><br></div><div>Remote was created but I got errors "Jun 12 12:51:43 ip-1-76-158-244 rq[19389]: pulp: rq.worker:ERROR: ssl.SSLError: [PEM: NO_START_LINE] no start line (_ssl.c:3626)" when I tried to sync with http POST :24817${REMOTE_HREF}sync/ repository=$REPO_HREF</div><div><br></div><div>Then I tried to converted the pem file to a json format </div><div>{</div><div>"name": "rhel-x86_64-server-7",</div><div>"url": "<a spellcheck="false" bbg-destination="rte:bind"class="" href="https://cdn.redhat.com/content/dist/rhel/server/7/7Server/x86_64/os"data-destination="rte:bind">https://cdn.redhat.com/content/dist/rhel/server/7/7Server/x86_64/os</a>",</div><div>"ssl_ca_certificate": "-----BEGIN CERTIFICATE-----\nMIIG/TCCBOWgAwIBAgIBNzANBgkqhkiG9w0BAQUFADCBsTELMAkGA1UEBhMCVVMx\nFzAVBg</div><div>...</div><div>"ssl_client_certificate": "-----BEGIN CERTIFICATE-----\nMIIMojCCCoqgAwIBAgIISqmnKnJ9sEowDQ</div><div>...</div><div>"ssl_client_key": "-----BEGIN RSA PRIVATE KEY-----\nMIIJKQIBAAKCAgEAuujl5HxnIDTSOemZOyH3Jr5xxgrc1rCee</div><div>...</div><div>"ssl_validation": true,</div><div>"proxy_url": "<a spellcheck="false" bbg-destination="rte:bind"class="" href="http://proxy:80" data-destination="rte:bind">http://proxy:80</a>",</div><div>"download_concurrency": 1,</div><div>"policy": "immediate"</div><div>} </div><div><br></div><div>I got this error when I tried to sync repo with the remote:</div><div>Jun 12 12:07:57 ip-1-76-158-244 rq[19389]: ssl.SSLError: [SSL] PEM lib (_ssl.c:3503)</div><div><br></div></div><div><br></div><div>What is the correct json input for creating a remote to redhat? How do I troubleshoot the sync issue? Thanks for your help.</div></div></div></div>_______________________________________________<br>Pulp-list mailing list<br><a spellcheck="false"bbg-destination="mailto:rte:bind" class="" href="mailto:Pulp-list@redhat.com" data-destination="mailto:rte:bind">Pulp-list@redhat.com</a><br><a spellcheck="false"bbg-destination="rte:bind" class="" href="https://www.redhat.com/mailman/listinfo/pulp-list"data-destination="rte:bind">https://www.redhat.com/mailman/listinfo/pulp-list</a></blockquote></div></blockquote></div></blockquote><br></div></div></div></div></div></div></div></blockquote></div></blockquote><br></div></div></div></div></div></body></html>