haproxy fails with imtermediate CA bundle
Bug #1604930 reported by
Ed Byrne
This bug affects 1 person
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
Fuel for OpenStack |
Invalid
|
Medium
|
Maksim Malchuk | ||
Mitaka |
Invalid
|
Medium
|
Maksim Malchuk |
Bug Description
I created a cert bundle containing cert, private key, and intermediate CA bundle and used this for my cert in fuel. Deploying fails because haproxy doesn't like the cert. If I strip the intermedia CA out, haproxy starts without errors. Of course, then neutron fails because the cert is invalid, so this is not a solution either.
no longer affects: | mos |
Changed in fuel: | |
status: | New → Confirmed |
importance: | Undecided → Medium |
assignee: | nobody → Fuel Sustaining (fuel-sustaining-team) |
milestone: | none → 10.0 |
tags: | added: area-library |
To post a comment you must log in.
Ed Byrne, could you please provide the Fuel version you use or at least show output of the command: haproxy -vv
AFAIK, haproxy compiled with USE_OPENSSL=1 should correctly handle concatenated ssl certs.