When using SSL nova serial console proxy uses an unsecure websocket

Bug #1841914 reported by Will Szumski
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
kolla-ansible
Fix Released
Medium
Will Szumski
Rocky
Fix Committed
Medium
Mark Goddard
Stein
Fix Committed
Medium
Mark Goddard
Train
Fix Released
Medium
Will Szumski

Bug Description

```
serialConsole.js:57 Mixed Content: The page at 'https://my-cloud.com/project/instances/641a5883-aab9-442a-8967-54cd84b47c80/' was loaded over HTTPS, but attempted to connect to the insecure WebSocket endpoint 'ws://my-cloud.com:6083/?token=d599fa22-73e4-4eb1-a0ea-63fbe26cd6d2'. This request has been blocked; this endpoint must be available over WSS.
Error: Failed to construct 'WebSocket': An insecure WebSocket connection may not be initiated from a page loaded over HTTPS.
```

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to kolla-ansible (master)

Fix proposed to branch: master
Review: https://review.opendev.org/679222

Changed in kolla-ansible:
assignee: nobody → Will Szumski (willjs)
status: New → In Progress
Mark Goddard (mgoddard)
Changed in kolla-ansible:
importance: Undecided → Medium
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to kolla-ansible (master)

Reviewed: https://review.opendev.org/679222
Committed: https://git.openstack.org/cgit/openstack/kolla-ansible/commit/?id=94d824dd0eec3f1a37586c03d0b79b074c37653e
Submitter: Zuul
Branch: master

commit 94d824dd0eec3f1a37586c03d0b79b074c37653e
Author: Will Szumski <email address hidden>
Date: Thu Aug 29 11:02:28 2019 +0100

    Use secure websocket for nova serial console proxy when TLS enabled

    This resolves an issue where the web browser would complain that it
    was trying to connect to insecure websocket when using HTTPS with
    horizon.

    Change-Id: Ib75cc2bc1b3811bc31badd5fda3db3ed0c59b119
    Closes-Bug: #1841914

Changed in kolla-ansible:
status: In Progress → Fix Released
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to kolla-ansible (stable/stein)

Fix proposed to branch: stable/stein
Review: https://review.opendev.org/679633

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to kolla-ansible (stable/rocky)

Fix proposed to branch: stable/rocky
Review: https://review.opendev.org/679637

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to kolla-ansible (stable/rocky)

Reviewed: https://review.opendev.org/679637
Committed: https://git.openstack.org/cgit/openstack/kolla-ansible/commit/?id=dfaeae01003a9b98826bb10600478cf1d3745352
Submitter: Zuul
Branch: stable/rocky

commit dfaeae01003a9b98826bb10600478cf1d3745352
Author: Will Szumski <email address hidden>
Date: Thu Aug 29 11:02:28 2019 +0100

    Use secure websocket for nova serial console proxy when TLS enabled

    This resolves an issue where the web browser would complain that it
    was trying to connect to insecure websocket when using HTTPS with
    horizon.

    Change-Id: Ib75cc2bc1b3811bc31badd5fda3db3ed0c59b119
    Closes-Bug: #1841914
    (cherry picked from commit 94d824dd0eec3f1a37586c03d0b79b074c37653e)

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to kolla-ansible (stable/stein)

Reviewed: https://review.opendev.org/679633
Committed: https://git.openstack.org/cgit/openstack/kolla-ansible/commit/?id=6c480378a8b3f7797c7d8a5c53b3d0f0d26dd23f
Submitter: Zuul
Branch: stable/stein

commit 6c480378a8b3f7797c7d8a5c53b3d0f0d26dd23f
Author: Will Szumski <email address hidden>
Date: Thu Aug 29 11:02:28 2019 +0100

    Use secure websocket for nova serial console proxy when TLS enabled

    This resolves an issue where the web browser would complain that it
    was trying to connect to insecure websocket when using HTTPS with
    horizon.

    Change-Id: Ib75cc2bc1b3811bc31badd5fda3db3ed0c59b119
    Closes-Bug: #1841914
    (cherry picked from commit 94d824dd0eec3f1a37586c03d0b79b074c37653e)

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix included in openstack/kolla-ansible 7.1.2

This issue was fixed in the openstack/kolla-ansible 7.1.2 release.

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix included in openstack/kolla-ansible 8.0.1

This issue was fixed in the openstack/kolla-ansible 8.0.1 release.

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix included in openstack/kolla-ansible 9.0.0.0rc1

This issue was fixed in the openstack/kolla-ansible 9.0.0.0rc1 release candidate.

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.