log errors when signing/verification fail
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
OpenStack Identity (keystone) |
Fix Released
|
Medium
|
Dan Prince |
Bug Description
When using Keystone w/ PKI enabled a user might see a log message like this in the log file:
2012-07-31 01:45:03 ERROR [root] Command 'openssl' returned non-zero exit status 3
Traceback (most recent call last):
File "/usr/lib/
result = method(context, **params)
File "/usr/lib/
config.
File "/usr/lib/
"openssl", output=output)
CalledProcessError: Command 'openssl' returned non-zero exit status 3
-----
This can be a bit confusing... in my case the error was due to permission issues on the keys in /etc/keystone/ssl/* due to the fact that they were root:root but I run keystone the keystone daemon via package w/ a nologin keystone user account.
The error I actually wanted to see in the log file was this... which I got by adding some manual logging to common/cms.py:
2012-07-31 11:10:53 ERROR [keystone.
140380567730016
140380567730016
unable to load signing key file
Changed in keystone: | |
assignee: | nobody → Dan Prince (dan-prince) |
importance: | Undecided → Medium |
status: | New → In Progress |
Changed in keystone: | |
milestone: | none → folsom-3 |
status: | Fix Committed → Fix Released |
Changed in keystone: | |
milestone: | folsom-3 → 2012.2 |
Fix proposed to branch: master /review. openstack. org/10599
Review: https:/