Kuryr-libnetwork docker will has ssl error in multi-threads

Bug #1675301 reported by Liping Mao
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
kuryr-libnetwork
In Progress
Undecided
Liping Mao

Bug Description

Environment:
kuryr-libetwork runs in docker, neutron is under https.

Problem:
1. when kuryr-libnetwork container runs in process 2, thread 2. it will has the following ssl error:

docker: Error response from daemon: failed to create endpoint nervous_shaw on network limao_kuryr1: NetworkDriver.CreateEndpoint: SSL exception connecting to https://ci92hf-neutron.qa.webex.com:443/v2.0/networks.json?tags=kuryr.net.uuid.lh%3Aa2e3b4bb50095c9d6323d41b35cc04a7%2Ckuryr.net.uuid.uh%3Aebe1bb7e21db844ea24a12ea80c43eff: [SSL: DECRYPTION_FAILED_OR_BAD_RECORD_MAC] decryption failed or bad record mac (_ssl.c:1754).

2. If it runs in process 2, thread 1 (or process 1, thread 1). It works fine.

Revision history for this message
Liping Mao (limao) wrote :

I find the following similar problem in stackoverflow:
http://stackoverflow.com/questions/3724900/python-ssl-problem-with-multiprocessing

Will look into more.

Changed in kuryr-libnetwork:
assignee: nobody → Liping Mao (limao)
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to kuryr-libnetwork (master)

Fix proposed to branch: master
Review: https://review.openstack.org/449002

Changed in kuryr-libnetwork:
status: New → In Progress
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Related fix merged to kuryr-libnetwork (master)

Reviewed: https://review.openstack.org/449002
Committed: https://git.openstack.org/cgit/openstack/kuryr-libnetwork/commit/?id=95e22ab2b64ea88770527f70989614058ff6fd4f
Submitter: Jenkins
Branch: master

commit 95e22ab2b64ea88770527f70989614058ff6fd4f
Author: Liping Mao (limao) <email address hidden>
Date: Thu Mar 23 16:29:22 2017 +0800

    Kuryr-libnetwork container ssl error in multi-thread

    When use kuryr-libnetwork container with multi-thread and neutron
    service under https, uwsgi will has ssl error.

    Change-Id: I897d84742570dcc2d4daba1ea40882814a38679f
    Related-Bug: #1675301

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.