Build shaker image fails due to SSL - "certificate did not match expected hostname"

Bug #1704069 reported by Mageshwaran Vaithianathan
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
openstack-browbeat
New
Undecided
Unassigned

Bug Description

Installed undercloud and overcloud using TripleO quickstart script. While installing browbeat on the undercloud, facing the below issue during the execution of shaker_build.yml

Openstack version - Newton
Host OS - CentOS 7

TASK [build shaker image]
fatal: [undercloud]: FAILED! => {
    "changed": true,
    "cmd": "source /home/stack/overcloudrc; source /home/stack/shaker-venv/bin/activate; shaker-image-builder --flavor-name m1.small --image-builder-template /home/stack/shaker-venv/lib/python2.7/site-packages/shaker/resources/image_builder_templates/centos.yaml --dns-nameservers 8.8.8.8 --os-region-name regionOne",
    "delta": "0:00:00.538756",
    "end": "2017-07-13 12:22:20.731609",
    "failed": true,
    "failed_when_result": true,
    "invocation": {
        "module_args": {
            "_raw_params": "source /home/stack/overcloudrc; source /home/stack/shaker-venv/bin/activate; shaker-image-builder --flavor-name m1.small --image-builder-template /home/stack/shaker-venv/lib/python2.7/site-packages/shaker/resources/image_builder_templates/centos.yaml --dns-nameservers 8.8.8.8 --os-region-name regionOne",
            "_uses_shell": true,
            "chdir": null,
            "creates": null,
            "executable": null,
            "removes": null,
            "warn": true
        }
    },
    "rc": 1,
    "start": "2017-07-13 12:22:20.192853",
    "stderr": "",
    "stderr_lines": [],
    "stdout_lines": [
        "2017-07-13 12:22:20.590 30364 INFO shaker.engine.utils [-] Logging enabled",
        "2017-07-13 12:22:20.703 30364 ERROR urllib3.connection [-] Certificate did not match expected hostname: 10.0.0.5. Certificate: {'subjectAltName': (('IP Address', '10.0.0.5'),), 'notBefore': u'Jul 11 12:33:06 2017 GMT', 'serialNumber': u'01', 'notAfter': 'Jul 11 12:33:06 2018 GMT', 'version': 3L, 'subject': ((('countryName', u'US'),), (('stateOrProvinceName', u'NC'),), (('localityName', u'Raleigh'),), (('organizationName', u'Red Hat'),), (('organizationalUnitName', u'OOOQ'),), (('commonName', u'10.0.0.5'),)), 'issuer': ((('countryName', u'US'),), (('stateOrProvinceName', u'NC'),), (('localityName', u'Raleigh'),), (('organizationName', u'Red Hat'),), (('organizationalUnitName', u'OOOQ'),), (('commonName', u'overcloud'),))}: CertificateError: hostname '10.0.0.5' doesn't match '10.0.0.5'",
        "2017-07-13 12:22:20.703 30364 WARNING keystoneauth.identity.generic.base [-] Failed to discover available identity versions when contacting https://10.0.0.5:13000/v2.0. Attempting to parse version from URL.: SSLError: SSL exception connecting to https://10.0.0.5:13000/v2.0: hostname '10.0.0.5' doesn't match '10.0.0.5'",
        "2017-07-13 12:22:20.710 30364 ERROR urllib3.connection [-] Certificate did not match expected hostname: 10.0.0.5. Certificate: {'subjectAltName': (('IP Address', '10.0.0.5'),), 'notBefore': u'Jul 11 12:33:06 2017 GMT', 'serialNumber': u'01', 'notAfter': 'Jul 11 12:33:06 2018 GMT', 'version': 3L, 'subject': ((('countryName', u'US'),), (('stateOrProvinceName', u'NC'),), (('localityName', u'Raleigh'),), (('organizationName', u'Red Hat'),), (('organizationalUnitName', u'OOOQ'),), (('commonName', u'10.0.0.5'),)), 'issuer': ((('countryName', u'US'),), (('stateOrProvinceName', u'NC'),), (('localityName', u'Raleigh'),), (('organizationName', u'Red Hat'),), (('organizationalUnitName', u'OOOQ'),), (('commonName', u'overcloud'),))}: CertificateError: hostname '10.0.0.5' doesn't match '10.0.0.5'",
        "2017-07-13 12:22:20.710 30364 ERROR shaker.engine.image_builder [-] Failed to connect to OpenStack: SSL exception connecting to https://10.0.0.5:13000/v2.0/tokens: hostname '10.0.0.5' doesn't match '10.0.0.5'. Please verify parameters: {'os_insecure': False, 'os_cacert': None, 'auth': {'username': 'admin', 'project_name': 'admin', 'password': '3MAX6nTgKsgMrhTjvK6CZ4aQZ', 'auth_url': 'https://10.0.0.5:13000/v2.0'}, 'os_region_name': 'regionOne'}: SSLError: SSL exception connecting to https://10.0.0.5:13000/v2.0/tokens: hostname '10.0.0.5' doesn't match '10.0.0.5'"
    ]
}

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.