TOR connection down in a HA, tor, BMS setup with single cacert file
Affects | Status | Importance | Assigned to | Milestone | ||
---|---|---|---|---|---|---|
Juniper Openstack | Status tracked in Trunk | |||||
Trunk |
Invalid
|
High
|
Prabhjot Singh Sethi |
Bug Description
2689 juno
Topo:
host1='
host2='
host3='
host4='
host5='
host6='
host7='
ext_routers = [('yuvaraj', '10.204.217.190')]
router_asn = 64512
public_vn_rtgt = 10000
public_vn_subnet = "10.84.41.0/24"
host_build = 'stack@
env.roledefs = {
'all': [host1, host2, host3, host4, host5, host6, host7],
'cfgm': [host1, host2, host3],
'openstack'
'collector': [host1, host2, host3],
'webui': [host1],
'control': [host1, host2, host3],
'compute': [host4, host5, host6, host7],
'toragent': [host6, host7],
'tsn': [host6, host7],
'database': [host1, host2, host3],
'build': [host_build],
}
env.ha = {
'internal_vip' : '10.204.217.200',
'internal_
}
I deleted the cacert file on the tor and the qfx that was generated after provisioning. This is so that I could use a single cacert file. After enabling xmpp auth with proper knobs set in conf files, and having only one cacert file for both xmpp and tor, running setup_tors makes the tor connection down:
root@nodec15:~# contrail-status
== Contrail vRouter ==
supervisor-vrouter: active
contrail-
contrail-
contrail-
contrail-
The trace on the tor introspect has these certificate mismatch messages:
2015-12-30 10:10:25.932 TcpSessionMessa
Changed in juniperopenstack: | |
importance: | Undecided → High |
tags: | added: xmpp |
information type: | Proprietary → Public |
Please provide the setup details/ ssl cert files (in use) to look at the issue