Build shaker image fails due to SSL - "certificate did not match expected hostname"

Bug #1704069 reported by Mageshwaran Vaithianathan on 2017-07-13
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
openstack-browbeat
Undecided
Unassigned

Bug Description

Installed undercloud and overcloud using TripleO quickstart script. While installing browbeat on the undercloud, facing the below issue during the execution of shaker_build.yml

Openstack version - Newton
Host OS - CentOS 7

TASK [build shaker image]
fatal: [undercloud]: FAILED! => {
    "changed": true,
    "cmd": "source /home/stack/overcloudrc; source /home/stack/shaker-venv/bin/activate; shaker-image-builder --flavor-name m1.small --image-builder-template /home/stack/shaker-venv/lib/python2.7/site-packages/shaker/resources/image_builder_templates/centos.yaml --dns-nameservers 8.8.8.8 --os-region-name regionOne",
    "delta": "0:00:00.538756",
    "end": "2017-07-13 12:22:20.731609",
    "failed": true,
    "failed_when_result": true,
    "invocation": {
        "module_args": {
            "_raw_params": "source /home/stack/overcloudrc; source /home/stack/shaker-venv/bin/activate; shaker-image-builder --flavor-name m1.small --image-builder-template /home/stack/shaker-venv/lib/python2.7/site-packages/shaker/resources/image_builder_templates/centos.yaml --dns-nameservers 8.8.8.8 --os-region-name regionOne",
            "_uses_shell": true,
            "chdir": null,
            "creates": null,
            "executable": null,
            "removes": null,
            "warn": true
        }
    },
    "rc": 1,
    "start": "2017-07-13 12:22:20.192853",
    "stderr": "",
    "stderr_lines": [],
    "stdout_lines": [
        "2017-07-13 12:22:20.590 30364 INFO shaker.engine.utils [-] Logging enabled",
        "2017-07-13 12:22:20.703 30364 ERROR urllib3.connection [-] Certificate did not match expected hostname: 10.0.0.5. Certificate: {'subjectAltName': (('IP Address', '10.0.0.5'),), 'notBefore': u'Jul 11 12:33:06 2017 GMT', 'serialNumber': u'01', 'notAfter': 'Jul 11 12:33:06 2018 GMT', 'version': 3L, 'subject': ((('countryName', u'US'),), (('stateOrProvinceName', u'NC'),), (('localityName', u'Raleigh'),), (('organizationName', u'Red Hat'),), (('organizationalUnitName', u'OOOQ'),), (('commonName', u'10.0.0.5'),)), 'issuer': ((('countryName', u'US'),), (('stateOrProvinceName', u'NC'),), (('localityName', u'Raleigh'),), (('organizationName', u'Red Hat'),), (('organizationalUnitName', u'OOOQ'),), (('commonName', u'overcloud'),))}: CertificateError: hostname '10.0.0.5' doesn't match '10.0.0.5'",
        "2017-07-13 12:22:20.703 30364 WARNING keystoneauth.identity.generic.base [-] Failed to discover available identity versions when contacting https://10.0.0.5:13000/v2.0. Attempting to parse version from URL.: SSLError: SSL exception connecting to https://10.0.0.5:13000/v2.0: hostname '10.0.0.5' doesn't match '10.0.0.5'",
        "2017-07-13 12:22:20.710 30364 ERROR urllib3.connection [-] Certificate did not match expected hostname: 10.0.0.5. Certificate: {'subjectAltName': (('IP Address', '10.0.0.5'),), 'notBefore': u'Jul 11 12:33:06 2017 GMT', 'serialNumber': u'01', 'notAfter': 'Jul 11 12:33:06 2018 GMT', 'version': 3L, 'subject': ((('countryName', u'US'),), (('stateOrProvinceName', u'NC'),), (('localityName', u'Raleigh'),), (('organizationName', u'Red Hat'),), (('organizationalUnitName', u'OOOQ'),), (('commonName', u'10.0.0.5'),)), 'issuer': ((('countryName', u'US'),), (('stateOrProvinceName', u'NC'),), (('localityName', u'Raleigh'),), (('organizationName', u'Red Hat'),), (('organizationalUnitName', u'OOOQ'),), (('commonName', u'overcloud'),))}: CertificateError: hostname '10.0.0.5' doesn't match '10.0.0.5'",
        "2017-07-13 12:22:20.710 30364 ERROR shaker.engine.image_builder [-] Failed to connect to OpenStack: SSL exception connecting to https://10.0.0.5:13000/v2.0/tokens: hostname '10.0.0.5' doesn't match '10.0.0.5'. Please verify parameters: {'os_insecure': False, 'os_cacert': None, 'auth': {'username': 'admin', 'project_name': 'admin', 'password': '3MAX6nTgKsgMrhTjvK6CZ4aQZ', 'auth_url': 'https://10.0.0.5:13000/v2.0'}, 'os_region_name': 'regionOne'}: SSLError: SSL exception connecting to https://10.0.0.5:13000/v2.0/tokens: hostname '10.0.0.5' doesn't match '10.0.0.5'"
    ]
}

To post a comment you must log in.
This report contains Public information  Edit
Everyone can see this information.

Other bug subscribers