MAAS

MAAS CLI with anonymous access fails when TLS is enabled

Bug #1980436 reported by Anton Troyanov
12
This bug affects 2 people
Affects Status Importance Assigned to Milestone
MAAS
Fix Released
High
Anton Troyanov
MAAS 3.3.0-beta1
3.2
Fix Released
High
Anton Troyanov
MAAS 3.2.1

Bug Description

maas login foo https://maas-lab:5443/MAAS/ --cacerts ~/cacerts.pem
maas login foo https://maas-lab:5443/MAAS/ -k

Fails with an error:

requests.exceptions.SSLError: HTTPSConnectionPool(host='10.0.1.21', port=5443): Max retries exceeded with url: /MAAS/api/2.0/account/?op=create_authorisation_token (Caused by SSLError(SSLError("bad handshake: Error([('SSL routines', 'tls_process_server_certificate', 'certificate verify failed')])")))

See original description

Related branches

~troyanov/maas:backport-fix-1980436-3.2
MAAS Lander: Approve
MAAS Maintainers: Pending requested
Diff: 78 lines (+17/-8)
2 files modified
src/maascli/auth.py (+11/-4)
src/maascli/cli.py (+6/-4)
~troyanov/maas:fix-1980436
MAAS Lander: Approve
Alberto Donato (community): Approve
Diff: 78 lines (+17/-8)
2 files modified
src/maascli/auth.py (+11/-4)
src/maascli/cli.py (+6/-4)
Revision history for this message
Anton Troyanov (troyanov) wrote :

Until this fix is released: workaround is to add CA into trusted root

Anton Troyanov (troyanov)
description: updated
Adam Collard (adam-collard)
Changed in maas:
importance: Undecided → Critical
importance: Critical → High
milestone: none → 3.3.0
MAAS Lander (maas-lander)
Changed in maas:
status: In Progress → Fix Committed
Anton Troyanov (troyanov)
summary: - MAAC CLI with anonymous access fails when TLS is enabled
+ MAAS CLI with anonymous access fails when TLS is enabled
Alexsander de Souza (alexsander-souza)
Changed in maas:
milestone: 3.3.0 → 3.3.0-beta1
Alexsander de Souza (alexsander-souza)
Changed in maas:
status: Fix Committed → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.
Subscribing...

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.