Pike - keystone with SSL PKI unconfigured unable to load certificate
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
OpenStack Keystone Charm |
Fix Released
|
Low
|
Corey Bryant |
Bug Description
From keystone.log
(keystoneclient
keystone-manage pki_setup"
(keystone.
Traceback (most recent call last):
File "/usr/lib/
result = method(req, **params)
File "/usr/lib/
return f(self, request, *args, **kwargs)
File "/usr/lib/
CONF.
File "/usr/lib/
signing_
File "/usr/lib/
raise subprocess.
CalledProcessError: Command 'openssl' returned non-zero exit status 3
From the charm in keystone_hooks.py I see that it is supposed to skip this for Pike.
if CompareOpenStac
# pike dropped support for PKI token; skip function
return
However the log seems to contradict this.
We are seeing a lack of usability with keystone with Pike + SSL. Without SSL this same environment was functional. The above is the only error in keystone. Currently the CLI and dashboard are not available.
Changed in charm-keystone: | |
assignee: | nobody → Corey Bryant (corey.bryant) |
milestone: | none → 18.05 |
importance: | Undecided → High |
Changed in charm-keystone: | |
status: | Incomplete → Confirmed |
Changed in charm-keystone: | |
status: | Fix Committed → Fix Released |
Please include juju crashdump and/or the juju bundle, status and relevant juju unit logs. Thank you.