{"action":"created","issue":{"url":"https://api.github.com/repos/apache/cloudstack/issues/2763","repository_url":"https://api.github.com/repos/apache/cloudstack","labels_url":"https://api.github.com/repos/apache/cloudstack/issues/2763/labels{/name}","comments_url":"https://api.github.com/repos/apache/cloudstack/issues/2763/comments","events_url":"https://api.github.com/repos/apache/cloudstack/issues/2763/events","html_url":"https://github.com/apache/cloudstack/issues/2763","id":343913196,"node_id":"MDU6SXNzdWUzNDM5MTMxOTY=","number":2763,"title":"Host is still unsecured when provisionCertificate api is called","user":{"login":"borisstoyanov","id":13551960,"node_id":"MDQ6VXNlcjEzNTUxOTYw","avatar_url":"https://avatars1.githubusercontent.com/u/13551960?v=4","gravatar_id":"","url":"https://api.github.com/users/borisstoyanov","html_url":"https://github.com/borisstoyanov","followers_url":"https://api.github.com/users/borisstoyanov/followers","following_url":"https://api.github.com/users/borisstoyanov/following{/other_user}","gists_url":"https://api.github.com/users/borisstoyanov/gists{/gist_id}","starred_url":"https://api.github.com/users/borisstoyanov/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/borisstoyanov/subscriptions","organizations_url":"https://api.github.com/users/borisstoyanov/orgs","repos_url":"https://api.github.com/users/borisstoyanov/repos","events_url":"https://api.github.com/users/borisstoyanov/events{/privacy}","received_events_url":"https://api.github.com/users/borisstoyanov/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":1,"created_at":"2018-07-24T07:16:51Z","updated_at":"2018-07-24T07:54:34Z","closed_at":null,"author_association":"CONTRIBUTOR","body":"##### SUMMARY\r\n<!-- Explain the problem/feature briefly -->\r\nWhen provisionCertificate api is executed the host ends up in unsecured state, instead should be secured\r\n\r\n<!--\r\nVerify first that your issue/request is not already reported on GitHub.\r\nAlso test if the latest release and master branch are affected too.\r\nAlways add information AFTER of these HTML comments, but no need to delete the comments.\r\n-->\r\n##### ISSUE TYPE\r\n<!-- Pick one below and delete the rest -->\r\n * Bug Report\r\n\r\n##### COMPONENT NAME\r\n<!--\r\nCategorize the issue, e.g. API, VR, VPN, UI, etc.\r\n-->\r\n~~~\r\nAPI, agent\r\n~~~\r\n\r\n##### CLOUDSTACK VERSION\r\n<!--\r\nNew line separated list of affected versions, commit ID for issues on master branch.\r\n-->\r\n\r\n~~~\r\n4.12\r\n~~~\r\n\r\n##### CONFIGURATION\r\n<!--\r\nInformation about the configuration if relevant, e.g. basic network, advanced networking, etc.  N/A otherwise\r\n-->\r\nca.framework.cert.automatic.renewal = true\r\nca.plugin.root.allow.expired.cert = true\r\nca.plugin.root.auth.strictness = false\r\n\r\n\r\n##### OS / ENVIRONMENT\r\n<!--\r\nInformation about the environment if relevant, N/A otherwise\r\n-->\r\nNA\r\n\r\n##### STEPS TO REPRODUCE\r\n<!-- Paste example playbooks or commands between quotes below -->\r\n~~~\r\nexecute provisionCertificate api with a random kvm host with/out recconect=true, the api call is successful but connection is unsecured. \r\n~~~\r\n\r\n<!-- You can also paste gist.github.com links for larger files -->\r\n\r\n##### EXPECTED RESULTS\r\n<!-- What did you expect to happen when running the steps above? -->\r\n\r\n~~~\r\nConnection is secured \r\n~~~\r\n\r\n##### ACTUAL RESULTS\r\n<!-- What actually happened? -->\r\n\r\n<!-- Paste verbatim command output between quotes below -->\r\n~~~\r\nConnection is unsecured \r\n\r\n~~~\r\n\r\n\r\n[agent_unsecured.txt](https://github.com/apache/cloudstack/files/2222393/agent_unsecured.txt)\r\n[unsecured_connection.txt](https://github.com/apache/cloudstack/files/2222394/unsecured_connection.txt)\r\n"},"comment":{"url":"https://api.github.com/repos/apache/cloudstack/issues/comments/407315635","html_url":"https://github.com/apache/cloudstack/issues/2763#issuecomment-407315635","issue_url":"https://api.github.com/repos/apache/cloudstack/issues/2763","id":407315635,"node_id":"MDEyOklzc3VlQ29tbWVudDQwNzMxNTYzNQ==","user":{"login":"dhlaluku","id":19572501,"node_id":"MDQ6VXNlcjE5NTcyNTAx","avatar_url":"https://avatars1.githubusercontent.com/u/19572501?v=4","gravatar_id":"","url":"https://api.github.com/users/dhlaluku","html_url":"https://github.com/dhlaluku","followers_url":"https://api.github.com/users/dhlaluku/followers","following_url":"https://api.github.com/users/dhlaluku/following{/other_user}","gists_url":"https://api.github.com/users/dhlaluku/gists{/gist_id}","starred_url":"https://api.github.com/users/dhlaluku/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/dhlaluku/subscriptions","organizations_url":"https://api.github.com/users/dhlaluku/orgs","repos_url":"https://api.github.com/users/dhlaluku/repos","events_url":"https://api.github.com/users/dhlaluku/events{/privacy}","received_events_url":"https://api.github.com/users/dhlaluku/received_events","type":"User","site_admin":false},"created_at":"2018-07-24T07:54:34Z","updated_at":"2018-07-24T07:54:34Z","author_association":"CONTRIBUTOR","body":"@borisstoyanov I do not think so, that small fix that I did was for the NPE issue. The VM lifecycle tests have already been failing before and I think it might be due to regressions in provisionCertificate API itself that need looking into. Perhaps @rhtyd can help us here since he authored the Secure live migration feature."}}
{"actor":{"display_login":"dhlaluku"}}