R4.1.1.0-12-newton Horizon random failure when using https/ssl keystone endpoints

Bug #1794113 reported by MaximeL
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
Juniper Openstack
Status tracked in Trunk
R4.1
New
High
Sarin Kizhakkepurayil
R5.0
New
High
Sarin Kizhakkepurayil
Trunk
New
High
Sarin Kizhakkepurayil

Bug Description

Hi,

In Openstack newton version deployed with sm-lite and R4.1.1.0-12 packages, and with ssl configuration applied to identity, random failures happened when listing projects/users/domains happen under Horizon dashboard.

[Mon Sep 24 13:19:20.394084 2018] [wsgi:error] [pid 17059:tid 139880208639744] File "/usr/lib/python2.7/dist-packages/keystoneauth1/session.py", line 555, in request
[Mon Sep 24 13:19:20.394086 2018] [wsgi:error] [pid 17059:tid 139880208639744] resp = send(**kwargs)
[Mon Sep 24 13:19:20.394088 2018] [wsgi:error] [pid 17059:tid 139880208639744] File "/usr/lib/python2.7/dist-packages/keystoneauth1/session.py", line 593, in _send_request
[Mon Sep 24 13:19:20.394090 2018] [wsgi:error] [pid 17059:tid 139880208639744] raise exceptions.SSLError(msg)
[Mon Sep 24 13:19:20.394093 2018] [wsgi:error] [pid 17059:tid 139880208639744] SSLError: SSL exception connecting to https://10.194.150.180:5000/v3/users/859ba096b6d647d2a074073507420bd5/projects: ('bad handshake: SysCallError(0, None)',)

This bug seems to be existing in several deployment project and known as an Openstack/Kolla bug within apache2 wsgi horizon configuration : https://bugs.launchpad.net/horizon/+bug/1708655

Applying this https://review.openstack.org/#/c/491810/ fixed the SSL hanshakes problems.

BR,
Maxime

Tags: ui
MaximeL (surfmax22)
information type: Proprietary → Private
information type: Private → Public Security
information type: Public Security → Public
Jeba Paulaiyan (jebap)
tags: added: ui
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.