SNI ssl support in docker

[Senthilnathan Murugappan]

SNI check with the current version of urllib3 fails to match IPAddress.

Error message:
SSLError: SSL exception connecting to https://10.84.21.1:35357: hostname ‘10.84.21.1’ doesn’t match either of ‘b1s1’, ‘b1s1.contrail.juniper.net’

Cert Info:
root@b1s1:/opt/contrail/server_manager/ansible/playbooks/image1/playbooks# openssl x509 -text -noout -in /etc/contrailctl/ssl/server.pem | grep “CN\|DNS”
       Issuer: CN=b1s1.contrail.juniper.net
       Subject: CN=b1s1
               DNS:b1s1, DNS:b1s1.contrail.juniper.net, IP Address:10.84.21.1

Curl will work but requests/urllib3 based http requests would fail with the above SSLError.

WorkAround:
pip install urllib3
pip install backports.ssl-match-hostname
update /usr/local/lib/python2.7/dist-packages/easy-install.pth inside the docker by adding /usr/local/lib/python2.7/dist-packages before /usr/lib/python2.7/dist-packages

[Jeba Paulaiyan (jebap)]

Release-notes:

SSL communication to API-server provisioned using R4.0.0.0 Server-Manager will not work.

[OpenContrail Admin (ci-admin-f)]

Review in progress for https://review.opencontrail.org/33337
Submitter: Ignatious Johnson Christopher (<email address hidden>)

[OpenContrail Admin (ci-admin-f)]

Review in progress for https://review.opencontrail.org/33338
Submitter: Ignatious Johnson Christopher (<email address hidden>)

[OpenContrail Admin (ci-admin-f)]

Reviewed: https://review.opencontrail.org/33337
Committed: http://github.com/Juniper/contrail-ansible-internal/commit/27b09ecc6007351c4c145f06acfd4e1ecf3a1a81
Submitter: Zuul (<email address hidden>)
Branch: master

commit 27b09ecc6007351c4c145f06acfd4e1ecf3a1a81
Author: Ignatious Johnson Christopher <email address hidden>
Date: Thu Jun 29 23:44:50 2017 -0700

Adding missing dependecies for SNI ssl support

in controller container.

Change-Id: Ic00241daf00e378897876ad4bffe1459ccd9ef80
Closes-Bug: 1695770

[OpenContrail Admin (ci-admin-f)]

Reviewed: https://review.opencontrail.org/33338
Committed: http://github.com/Juniper/contrail-ansible-internal/commit/287fb9b462c88d1831a1f86219278694b3d95a3d
Submitter: Zuul (<email address hidden>)
Branch: R4.0

commit 287fb9b462c88d1831a1f86219278694b3d95a3d
Author: Ignatious Johnson Christopher <email address hidden>
Date: Thu Jun 29 23:44:50 2017 -0700

Adding missing dependecies for SNI ssl support

in controller container.

Change-Id: Ic00241daf00e378897876ad4bffe1459ccd9ef80
Closes-Bug: 1695770