SSL Verification Error on Launch Instance (queens)

Bug #1796132 reported by Jake Zufelt
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
OpenStack Compute (nova)
Expired
Undecided
Unassigned

Bug Description

I'm enforcing all endpoints to use HTTPS in the user_variables.yml

openstack_service_publicuri_proto: https
openstack_service_adminuri_proto: https
openstack_service_internaluri_proto: https

Trying to launch an instance, fails and directs me to report a bug

Here are the logs that show the SSL verification erros:
http://paste.openstack.org/show/731504/

Error in the UI show:
Unexpected API Error. Please report this at http://bugs.launchpad.net/nova/ and attach the Nova API log if possible. <class 'keystoneauth1.exceptions.connection.SSLError'> (HTTP 500) (Request-ID: req-64108432-a960-4758-afc5-36c37e9999c1)

Tags: api
Jake Zufelt (skiedude)
no longer affects: openstack-ansible
tags: added: api
Revision history for this message
Jake Zufelt (skiedude) wrote :

Seems forcing everythign to https isn't the wisest choice and requires more nova specific ssl config, I'll be going back to using http, so this bug may no longer be valid to work on.

Revision history for this message
Ghanshyam Mann (ghanshyammann) wrote :

glance service seems not on https - Unexpected exception in API method: SSLError: SSL exception connecting to https://10.5.25.19:9292/v2/images/fd9637fb-57e8-4c43-9095-cddb9cb12969:

Is it solved with configuration or you still seeing issue ?

Revision history for this message
Ghanshyam Mann (ghanshyammann) wrote :

marking incomplete till we get confirmation from author.

Changed in nova:
status: New → Incomplete
Revision history for this message
Launchpad Janitor (janitor) wrote :

[Expired for OpenStack Compute (nova) because there has been no activity for 60 days.]

Changed in nova:
status: Incomplete → Expired
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.