SLURM WEB failed - after upgrade to 4.0.0 from 3.2.0

[stadox]

Hello,

firstly, happy new year and all the best in 2025!

I just did an upgrade from 3.2.0 where all was working well.

After the upgrade Slurm WEB stopped working

Thank you for help and response.

Kind regards,
S.

[stadox]

I installed

pip install certifi

don't know why it was missing suddenly from python site-packages

then restarted services

systemctl restart slurm-web-gateway-uwsgi.service
systemctl status slurm-web-agent-uwsgi.service

now looks bit better but still something is not as before.
I do see this.

Thank you

Regards,
Stanislav

[rezib]

Hello @stadox, according to these logs, it looks like there an SSL error between your gateway and your agent.

[stadox]

Hello @rezib, do you have any suggestion please what to do in this case?

thank you

Regards,
S.

[rezib]

I can't see the end of SSLError log line in your screenshot. There should be a more explicit error message at the end. Is is a self-signed certificate?

[stadox]

Hello,

this is what I got from journalctl -u slurm-web-gateway-uwsgi.service

Not self-signed. It's signed by CA.

In /var/log/messages I have found this record

uWSGIWorker5Core0: [INFO] Retrieving info from agent at url https://slurm.mstep/agent
Jan 7 10:07:05 model07 uwsgi[25641]: uWSGIWorker5Core0: [ERROR] Unable to retrieve agent info from url https://slurm.mstep/agent: [SSLError] HTTPSConnectionPool(host='slurm.mstep', port=443): Max retries exceeded with url: /agent/v4.0.0/info (Caused by SSLError(SSLCertVerificationError(1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: unable to get local issuer certificate (_ssl.c:1147)')))

But as I said, it's not self-signed certificate and I just did dnf update slurm-web-agent slurm-web-gateway without playing with the SSL.
Previously on 3.2 it was working well.

These packages were upgraded:

Do you have any idea what else to check please?

thank you

Regards,
S.

[stadox]

just for the record

It seems that this helped:

added certificate from local CA to /etc/pki/ca-trust/source/anchors/
update-ca-trust

pip install pip-system-certs

Curious, why it changed.

Thank you

Regards,
S.