Error while processing remote metastore at http://rockstor.com/rockons/root.json. Lower level exception: [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:618)

[havik65240 (Brandon Esser)]

[Please complete the below template with details of the problem reported on your Web-UI. Be as detailed as possible. Community members, including developers, shall try and help. Thanks for your time in reporting this issue! We recommend purchasing commercial support for expedited support directly from the developers.]

Brief description of the problem

Rock ons won’t show up. Keep getting an error when trying to refresh.

Detailed step by step instructions to reproduce the problem

Go to rock ons, turn on the service, click all, click update.

![scree

Web-UI screenshot

[Drag and drop the image here]

Error Traceback provided on the Web-UI

Traceback (most recent call last): File "/opt/rockstor/src/rockstor/rest_framework_custom/generic_view.py", line 41, in _handle_exception yield File "/opt/rockstor/src/rockstor/storageadmin/views/rockon.py", line 395, in _get_available response = requests.get(remote_root, timeout=10) File "/opt/rockstor/eggs/requests-1.1.0-py2.7.egg/requests/api.py", line 55, in get return request('get', url, **kwargs) File "/opt/rockstor/eggs/requests-1.1.0-py2.7.egg/requests/api.py", line 44, in request return session.request(method=method, url=url, **kwargs) File "/opt/rockstor/eggs/requests-1.1.0-py2.7.egg/requests/sessions.py", line 289, in request history = [r for r in gen] if allow_redirects else [] File "/opt/rockstor/eggs/requests-1.1.0-py2.7.egg/requests/sessions.py", line 133, in resolve_redirects proxies=proxies File "/opt/rockstor/eggs/requests-1.1.0-py2.7.egg/requests/sessions.py", line 279, in request resp = self.send(prep, stream=stream, timeout=timeout, verify=verify, cert=cert, proxies=proxies) File "/opt/rockstor/eggs/requests-1.1.0-py2.7.egg/requests/sessions.py", line 374, in send r = adapter.send(request, **kwargs) File "/opt/rockstor/eggs/requests-1.1.0-py2.7.egg/requests/adapters.py", line 213, in send raise SSLError(e) SSLError: [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:618)

[Hooverdan (Dan W.)]

@havik65240 welcome to the Rockstor community forums. Sorry you’re running into issues with the Rockon refresh. It looks very similar to a certificate issue posted on the forum quite recently. @Flox
has provided a temporary workaround that seems to resolve this issue (it worked for me and eventually for the original reporter of the SSL error as well). This unfortunately assumes, that you are somewhat familiar with the command line in Rockstor (either via webUI shell, or using other ssh clients like PuTTY). You can get to the web UI shell through here:

and here is the workaround from @Flox:

Rockstor 3 SSL certificate error when refreshing Rock-ons: a temporary workaround

As has been reported by a few users, our now legacy Rockstor 3 is now facing issues when trying to refresh the list of available Rock-ons. SSLError: [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:618) After a bit of investigation, the issue appears related to older certificates used by the python requests package, which comes bundled with its own. Due to the age of these certificates in our legacy Rockstor 3 version, these certificates are no-longer valid, resulting in the …

specifically this section

@Flox

Now, let’s actually work around that:

1. run yum update and wait for all updates to be applied. You might even consider a reboot at this point if a lot of packages related to the core system were included. This is to ensure we have an up-to-date system, especially anything related to ssl certificates.
2. Locate your system certificates. By default, they should be located at /etc/ssl/certs/ . Make sure the following does list the certificates.

ls -la /etc/ssl/certs/*

3. Now, we can tell python requests to use one of this certificates instead of its own. As mentioned above, we need to do this in two different lines of the same file:

sed -i "s:requests.get(remote_root, timeout=10):requests.get(remote_root, timeout=10, verify='/etc/ssl/certs/ca-bundle.crt'):g" /opt/rockstor/src/rockstor/storageadmin/views/rockon.py

sed -i "s:requests.get(cur_meta_url, timeout=10):requests.get(cur_meta_url, timeout=10, verify='/etc/ssl/certs/ca-bundle.crt'):g" /opt/rockstor/src/rockstor/storageadmin/views/rockon.py

for a quick info, the sed -i "s:pattern:replacement:g" file command simply replaces inplace ( -i option) the characters that match a specific pattern ( pattern ) with a new string of characters ( replacement ).

Inspect the file to make sure have indeed added , verify='/etc/ssl/certs/ca-bundle.crt' to the requests. This will ensure the system’s certificates are used instead of requests 's default ones.

Finally, restart the rockstor service for the changes to take effect:

systemctl restart rockstor

Give that a try.

[havik65240 (Brandon Esser)]

Still having an issue.
Im getting this after doing the steps above

Houston, we’ve had a problem.
Error while processing remote metastore at http://rockstor.com/rockons/root.json. Lower level exception: [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:618)

        Traceback (most recent call last):

File “/opt/rockstor/src/rockstor/rest_framework_custom/generic_view.py”, line 41, in _handle_exception
yield
File “/opt/rockstor/src/rockstor/storageadmin/views/rockon.py”, line 395, in _get_available
response = requests.get(remote_root, timeout=10, verify=’/etc/ssl/certs/ca-bundle.crt’)
File “/opt/rockstor/eggs/requests-1.1.0-py2.7.egg/requests/api.py”, line 55, in get
return request(‘get’, url, **kwargs)
File “/opt/rockstor/eggs/requests-1.1.0-py2.7.egg/requests/api.py”, line 44, in request
return session.request(method=method, url=url, **kwargs)
File “/opt/rockstor/eggs/requests-1.1.0-py2.7.egg/requests/sessions.py”, line 289, in request
history = [r for r in gen] if allow_redirects else []
File “/opt/rockstor/eggs/requests-1.1.0-py2.7.egg/requests/sessions.py”, line 133, in resolve_redirects
proxies=proxies
File “/opt/rockstor/eggs/requests-1.1.0-py2.7.egg/requests/sessions.py”, line 279, in request
resp = self.send(prep, stream=stream, timeout=timeout, verify=verify, cert=cert, proxies=proxies)
File “/opt/rockstor/eggs/requests-1.1.0-py2.7.egg/requests/sessions.py”, line 374, in send
r = adapter.send(request, **kwargs)
File “/opt/rockstor/eggs/requests-1.1.0-py2.7.egg/requests/adapters.py”, line 213, in send
raise SSLError(e)
SSLError: [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:618)

[phillxnet (Philip Guyton)]

@havik65240 Hello there.

I can chip in on this one.

@havik65240

Still having an issue.
Im getting this after doing the steps above

Did you also execute the command @ArmyHill01 mentioned in the thread started by @Flox referenced by @Hooverdan above? See:

Rockstor 3 SSL certificate error when refreshing Rock-ons: a temporary workaround

Had some time to review this today. Pulled rockon.py locally and started debugging. Code checked out fine so I knew it was a host issue. After a few snapshots and restores later, just running update-ca-trust was enough to solve this for me AFTER using the sed replacements. Hope this helps someone else!

It may be just that.

Note that our v4 “Built on openSUSE” is not currently affected by this issue.

Hope that helps.

[D_Jones]

I was having the same problem, I used the process posted by @Flox and it worked perfectly first try.