Loading state on bootstrap ignores ssl-hostname-verification setting

[Martin Packman]

[Impact]
Users of private cloud deployments with self-signed SSL certs can't use Juju

[Test Case]
#Requires cloud with swift storage using self-signed cert
juju bootstrap --debug
#fail

[Regression Potential]
Minimal code change in direct path only.

[Original Bug Report]
In a private openstack cloud setup, using self-signed certs, juju fails to bootstrap even with ssl-hostname-verification configured as true. This appears to be because loading the provider-state date from swift during cloud-init setup on machine 0 fails due to the swift endpoint not having a valid certificate:

+ echo https://10.1.27.194:8080/v1/AUTH_74406d06ca654bf4804003942b2f3f7c/juju-3a596bb8224878b427a7728fd83b7886/provider-state
+ /var/lib/juju/tools/1.16.5-precise-amd64/jujud bootstrap-state --data-dir /var/lib/juju --env-config ... --constraints mem=1024M --debug
2014-01-13 07:05:33 DEBUG juju.agent agent.go:237 Reading agent config, format: format 1.16
2014-01-13 07:05:33 DEBUG juju.agent agent.go:464 initializing address [localhost:37017]
2014-01-13 07:05:33 INFO juju.state open.go:68 opening state; mongo addresses: ["localhost:37017"]; entity ""
2014-01-13 07:05:33 INFO juju.state open.go:106 connection established
2014-01-13 07:05:34 INFO juju.state open.go:136 initializing environment
2014-01-13 07:05:35 DEBUG juju.agent agent.go:474 state initialized
2014-01-13 07:05:35 DEBUG juju.agent agent.go:486 adding admin user
2014-01-13 07:05:37 DEBUG juju.agent agent.go:497 setting password hash for admin user
2014-01-13 07:05:39 ERROR juju supercommand.go:282 cannot load state from URL "https://10.1.27.194:8080/v1/AUTH_74406d06ca654bf4804003942b2f3f7c/juju-3a596bb8224878b427a7728fd83b7886/provider-state" (read from "/tmp/provider-state-url"): Get https://10.1.27.194:8080/v1/AUTH_74406d06ca654bf4804003942b2f3f7c/juju-3a596bb8224878b427a7728fd83b7886/provider-state: x509: certificate signed by unknown authority
failed: /var/lib/cloud/instance/scripts/runcmd [1]

[Curtis Hovey (sinzui)]

Hi Martin. Should the status of this bug be fix committed in trunk? Do we need to merge the branch in trunk?

[Martin Packman (gz)]

Now merged in Curtis, thanks.

[Rolf Leggewie (r0lf)]

saucy has seen the end of its life and is no longer receiving any updates. Marking the saucy task for this ticket as "Won't Fix".