Keystone silently crashes on SSL misconfiguration

Bug #1133041 reported by Ben Nemec
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
OpenStack Identity (keystone)
Fix Released
Undecided
Brant Knudson

Bug Description

Steps to reproduce:
1) Configure keystone to use ssl. I used the certificates in the examples folder.
2) Change permissions on the private key file so it cannot be read by Keystone.
3) Attempt to run any request against Keystone. It will crash with an SSL exception printed to the console, but does not log anything to inform the user what has happened. This means that if Keystone is started as a service there is no good way to troubleshoot the problem.

It would be better to catch exceptions from the server and log them for the user's benefit.

Brant Knudson (blk-u)
Changed in keystone:
assignee: nobody → Brant Knudson (blk-u)
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to keystone (master)

Fix proposed to branch: master
Review: https://review.openstack.org/23015

Changed in keystone:
status: New → In Progress
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to keystone (master)

Reviewed: https://review.openstack.org/23015
Committed: http://github.com/openstack/keystone/commit/6853e18c4d7fad803d60cf9bb446f41944497dfe
Submitter: Jenkins
Branch: master

commit 6853e18c4d7fad803d60cf9bb446f41944497dfe
Author: Ben Nemec <email address hidden>
Date: Mon Feb 25 21:00:06 2013 +0000

    Catch and log server exceptions

    Fixes bug 1133041

    Exceptions from the keystone WSGI server can occur and not be logged.
    This means keystone will appear to silently crash, so this change
    catches these exceptions and logs them so the user can determine
    the cause of the crash.

    Change-Id: Iecc4b8062fa4e7dbe021627613412b5dfc635432

Changed in keystone:
status: In Progress → Fix Committed
Thierry Carrez (ttx)
Changed in keystone:
milestone: none → grizzly-rc1
status: Fix Committed → Fix Released
Thierry Carrez (ttx)
Changed in keystone:
milestone: grizzly-rc1 → 2013.1
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.