glance client tries to use ssl for http endpoints

Bug #959401 reported by Mark Washenberger on 2012-03-19
This bug affects 1 person
Affects Status Importance Assigned to Milestone
Mark Washenberger

Bug Description

The glance client determines whether or not to use SSL for the glance service endpoint based on the auth url rather than glance url. There is no way to override this functionality. Thus, if you have an HTTPS enabled auth service, you can never talk to your glance server through the glance client.

root@z4-glance-api1:~# echo $OS_AUTH_URL
root@z4-glance-api1:~# glance -k --debug -A 7baa526d-cc19-4dcd-81a8-ca86efb169c6 -U http://localhost:9292/ index
Traceback (most recent call last):
  File "/usr/bin/glance", line 1031, in <module>
    result = command(options, args)
  File "/usr/bin/glance", line 63, in wrapper
    ret = func(*args, **kwargs)
  File "/usr/bin/glance", line 546, in images_index
  File "/usr/bin/glance", line 492, in _images_index
    images = client.get_images(**parameters)
  File "/usr/lib/python2.6/dist-packages/glance/", line 60, in get_images
    res = self.do_request("GET", "/images", params=params)
  File "/usr/lib/python2.6/dist-packages/glance/common/", line 58, in wrapped
    return func(self, *args, **kwargs)
  File "/usr/lib/python2.6/dist-packages/glance/common/", line 423, in do_request
  File "/usr/lib/python2.6/dist-packages/glance/common/", line 75, in wrapped
    return func(self, method, url, body, headers)
  File "/usr/lib/python2.6/dist-packages/glance/common/", line 565, in _do_request
    raise exception.ClientConnectionError(e)
glance.common.exception.ClientConnectionError: There was an error connecting to a server
Details: [Errno 1] _ssl.c:490: error:140770FC:SSL routines:SSL23_GET_SERVER_HELLO:unknown protocol

Changed in glance:
assignee: nobody → Mark Washenberger (markwash)

Fix proposed to branch: master

Changed in glance:
status: New → In Progress
Jay Pipes (jaypipes) on 2012-03-19
Changed in glance:
importance: Undecided → Medium
milestone: none → essex-rc1
Brian Waldon (bcwaldon) on 2012-03-20
Changed in glance:
status: In Progress → Fix Committed
Thierry Carrez (ttx) on 2012-03-21
Changed in glance:
status: Fix Committed → Fix Released
Thierry Carrez (ttx) on 2012-04-05
Changed in glance:
milestone: essex-rc1 → 2012.1
To post a comment you must log in.
This report contains Public information  Edit
Everyone can see this information.

Other bug subscribers