Comment 4 for bug 1460070

Revision history for this message
Stanislaw Bogatkin (sbogatkin) wrote :

Hi, Karen. We, actually doesn't support SSL for Fuel 6.0, but in your case you have a problem that your Horizon served by usual Apache and it think that it plain HTTP - and it's actually right. You can try next trick:

In your haproxy set one more option for your horizon config:

reqadd X-Forwarded-Proto:\ https

Then in your Apache set:

setenvif X-Forwarded-Proto https HTTPS=1

for your horizon vhost. Then in Horizon local config set:
OPENSTACK_SSL_NO_VERIFY = True

cause I have not forced Horizon to work with SSL with strict hostname check (there is actually a bug in Horizon master now).

It should help you to work over SSL for pages in Horizon itself.
If you want to get VNC to instances working - you should set nova-nonvncproxy, not Horizon. You should (in case with HAProxy) set your nova-nonvncproxy service on controllers over ssl and then set option in nova.conf to point to right URL for vnc on computes too. After this actions your VNC should work right from Horizon over SSL.