search
Ctrlk

Libvirt Service Fails to Start With Error "Cannot Read CA Certificate

hashtag
Problem

The pf9-ostackhost service is down because dependent libvirtd service refuses to start with error "Cannot read CA certificate: No such file or directory".

libvirtd: 6368: error : virNetTLSContextCheckCertFile:112 : Cannot read CA certificate '/etc/pf9/certs/libvirt/cacert.pem': No such file or directory

hashtag
Environment

  • Platform9 Managed OpenStack - v3.6.0 and Higher

  • Nova

  • Libvirt

hashtag
Cause

Libvirt is configured to look for a CA certificate by default and use it to establish a TLS/SSL connection. If the correct certificate is not configured or is missing or is not applicable then libvirtd refuses to start with an error about the CA certificate.

hashtag
Resolution

  1. Open the file /etc/libvirt/libvirtd.conf with a text editor and make the following changes.

listen_tcp=1
listen_tls=0
auth_tcp="none"
tcp_port="16509"

  1. Start the libvirtd service.

  1. Start the pf9-ostackhost service.

  1. If the libvirtd service still does not start, please contact Platform9 Supportarrow-up-right for further assistance.

PreviousMurano Environment Stuck in "Deleting" StatusNextVMware Gateway Appliance(VGA) in Failed State as pf9-monasca-vcenter-exporter Service Fails to Start

Last updated