ceph-rgw report 401 when using self-sign cert

[Jeffrey Zhang]

[root@node110 ceph-rgw]# openstack container create test
Unauthorized (HTTP 401) (Request-ID: tx00000000000000000000f-005e8ee523-9fa16-default)

log

2020-04-10 15:22:04.200 7f5c9aa03700 20 req 5 0.000s swift:list_buckets token_id=gAAAAABekB6cNC5iVbcVPKpeG2Xx0vXY61i-L9drP-yAz280mMbcWIf6Q5pPDz4CHTL_c5qofbFEZTc37IO7sbU6bFONfZUvMXjNlvOzy9bJbbyi1AQw098tJV1QhLZ4WfqIxpbMjE-X8nJgwNdKY4TQxiOobMsfg8B5hAo75LFwBcyR3gGzmaY
2020-04-10 15:22:04.200 7f5c9aa03700 20 sending request to https://xxx.com.cn:35357/v3/auth/tokens
2020-04-10 15:22:04.200 7f5c9aa03700 20 register_request mgr=0x5649493a3200 req_data->id=5, curl_handle=0x56494a5b6180
2020-04-10 15:22:04.200 7f5cbce5d700 20 link_request req_data=0x56494a0e5a00 req_data->id=5, curl_handle=0x56494a5b6180
2020-04-10 15:22:04.204 7f5cbce5d700 20 ERROR: msg->data.result=60 req_data->id=5 http_status=0
2020-04-10 15:22:04.204 7f5cbce5d700 20 ERROR: curl error: Peer certificate cannot be authenticated with given CA certificates
2020-04-10 15:22:04.204 7f5c9aa03700 20 req 5 0.004s swift:list_buckets rgw::auth::keystone::TokenEngine denied with reason=-22
2020-04-10 15:22:04.204 7f5c9aa03700 20 req 5 0.004s swift:list_buckets rgw::auth::swift::DefaultStrategy: trying rgw::auth::swift::SwiftAnonymousEngine
2020-04-10 15:22:04.204 7f5c9aa03700 20 req 5 0.004s swift:list_buckets rgw::auth::swift::SwiftAnonymousEngine denied with reason=-1
2020-04-10 15:22:04.204 7f5c9aa03700 5 req 5 0.004s swift:list_buckets Failed the auth strategy, reason=-1
2020-04-10 15:22:04.204 7f5c9aa03700 10 failed to authorize request

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: stable/train
Review: https://review.opendev.org/718936

[OpenStack Infra (hudson-openstack)]

Change abandoned by "Radosław Piliszek <email address hidden>" on branch: stable/train
Review: https://review.opendev.org/c/openstack/kolla-ansible/+/718936
Reason: train is going eol