<div dir="ltr"><div>Hi Tim,</div><div><br></div><div>The way the web server is currently configured by default, trailing slashes are required. Try "<font face="monospace"><a href="https://pulp.biamp.com/pulp/api/v3/status/">https://pulp.biamp.com/pulp/api/v3/status/</a>" instead.</font></div><div><font face="monospace"><br></font></div><div>I think that in this situation a lot of APIs would silently redirect to the correct version, but we don't currently support that. I do know that it has been discussed in the past and I vaguely remember there having been some reasons for doing this, but I can't seem to find any of those discussions, nor remember what the reasoning was. Maybe someone else does?<br></div><div><br></div><div><br></div></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Wed, Nov 4, 2020 at 7:18 PM Tim Black <<a href="mailto:timblaktu@gmail.com">timblaktu@gmail.com</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div dir="ltr"><div dir="ltr">I found <a href="https://github.com/httpie/httpie/issues/480" target="_blank">this httpie issue</a>, basically, the certs I imported into debian aren't respected by httpie. So I think I need to use --verify or --cert option of httpie.<div><br></div><div>But when I use --verify no, I get a 301:</div><div><br></div><div><font face="monospace">[tblack-stretch]/home/tblack/pulpcerts/certs > http --verify no <a href="https://pulp.biamp.com/pulp/api/v3/status" target="_blank">https://pulp.biamp.com/pulp/api/v3/status</a><br>HTTP/1.1 301 Moved Permanently<br>Connection: keep-alive<br>Content-Length: 0<br>Content-Type: text/html; charset=utf-8<br>Date: Thu, 05 Nov 2020 00:07:19 GMT<br>Location: /pulp/api/v3/status/<br>Server: nginx/1.14.2<br></font></div><div><br></div><div>and if I use --cert to point to the pulp-generated CA cert I copied over from pulp, I get a different httpie error, I believe indicating I'm using the wrong format cert:</div><div><br></div><font face="monospace"> http: error: Error: [('PEM routines', 'get_name', 'no start line'), ('SSL routines', 'SSL_CTX_use_PrivateKey_file', 'PEM lib')]<br></font><div><br></div><div><font face="arial, sans-serif">Thanks for your help.</font></div><div><br></div></div><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Wed, Nov 4, 2020 at 3:54 PM Tim Black <<a href="mailto:timblaktu@gmail.com" target="_blank">timblaktu@gmail.com</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div dir="ltr">I have installed a new pulp instance using pulp.pulp_installer 3.8.1 and the below ansible play, which mostly uses defaults. The containing playbook runs to completion with no errors, but I get the following error trying to access the api status endpoint with httpie:<div><br></div><div><font face="monospace">[tblack-stretch]cmm/ansible/projects/pulp > http <a href="https://pulp.mydomain.com/pulp/api/v3/status" target="_blank">https://pulp.biamp.com/pulp/api/v3/status</a> <br><br>http: error: SSLError: HTTPSConnectionPool(host='<a href="http://pulp.mydomain.com" target="_blank">pulp.biamp.com</a>', port=443): Max retries exceeded with url: /pulp/api/v3/status (Caused by SSLError(SSLError("bad handshake: Error([('SSL routines', 'tls_process_server_certificate', 'certificate verify failed')],)",),)) while doing GET request to URL: <a href="https://pulp.mydomain.com/pulp/api/v3/status" target="_blank">https://pulp.biamp.com/pulp/api/v3/status</a></font></div><div><font face="monospace"><br></font></div><div>It says it failed to verify the certificate. I've read <a href="https://docs.pulpproject.org/pulpcore/installation/instructions.html#ssl" target="_blank">the docs about ssl configuration</a>, and I have copied both the pulp-generated self-signed root CA and webserver certs from `/etc/pulp/certs/` to the client (tblack-stretch) I'm running httpie from. There, I imported the certs by placing them in
<font face="monospace">/usr/local/share/ca-certificates/extra</font> and running
<font face="monospace">update-ca-certificates</font>, but still got the same error. </div><div><br></div><div>Here is my play that invokes
pulp.pulp_installer.pulp_all_services. Any help would be appreciated. Thanks.</div><div><br></div><div><font face="monospace">- name: Install Pulp<br> hosts: pulp_cluster<br> vars:<br> # Pulp Installer Variables Documentation: <a href="https://pulp-installer.readthedocs.io/en/3.8.1/#variables" target="_blank">https://pulp-installer.readthedocs.io/en/3.8.1/#variables</a><br> pulp_install_plugins:<br> # IMPORTANT! Compatibility Between Pulpcore and Pulp Plugins Must be Manually Confirmed/Specified!<br> # <a href="https://pulp-installer.readthedocs.io/en/3.8.1/#note-on-plugin-version-compatibility-with-pulpcore" target="_blank">https://pulp-installer.readthedocs.io/en/3.8.1/#note-on-plugin-version-compatibility-with-pulpcore</a><br> # There is a tool that helps you find the compatible plugin versions.<br> # <a href="https://github.com/fao89/pdc" target="_blank">https://github.com/fao89/pdc</a><br> pulp-ansible:<br> version: 0.5.0<br> pulp-container:<br> version: 2.1.0<br> pulp-deb:<br> version: 2.7.0<br> pulp-file:<br> version: 1.3.0<br> pulp-python:<br> version: 3.0.0b11<br> pulp_default_admin_password: "{{ pulp_admin_password }}"<br> pulp_settings:<br> secret_key: "{{ pulp_django_secret_key }}"<br> content_origin: "https://{{ ansible_fqdn }}"<br></font></div><div><font face="monospace"> pre_tasks:<br> # The version string below is the highest of all those in roles' metadata:<br> # "min_ansible_version". It needs to be kept manually up-to-date.<br> - name: Verify Ansible meets min required version<br> assert:<br> that: "ansible_version.full is version_compare('2.8', '>=')"<br> msg: ><br> "You must update Ansible to at least 2.8 to use this version of Pulp 3 Installer."<br> roles:<br> - pulp.pulp_installer.pulp_all_services<br> environment:<br> DJANGO_SETTINGS_MODULE: pulpcore.app.settings<br></font></div><div><br></div></div>
</blockquote></div></div>
_______________________________________________<br>
Pulp-list mailing list<br>
<a href="mailto:Pulp-list@redhat.com" target="_blank">Pulp-list@redhat.com</a><br>
<a href="https://www.redhat.com/mailman/listinfo/pulp-list" rel="noreferrer" target="_blank">https://www.redhat.com/mailman/listinfo/pulp-list</a></blockquote></div>