StarlingX

  1. Bug #1954302
  2. Activity log

Activity log for bug #1954302

Date Who What changed Old value New value Message
2021-12-09 15:36:06 Alexandre Horst bug added bug
2021-12-09 15:43:58 OpenStack Infra starlingx: status New In Progress
2021-12-09 15:49:11 Alexandre Horst description Brief Description ----------------- System allow to install ssl certificate as ssl_ca certificate. There was no failure or error installation as below. [root@controller-0 (keystone_admin)]# system certificate-install -m ssl_ca my-server-cert.pem WARNING: For security reasons, the original certificate, containing the private key, will be removed, once the private key is processed. -------------------------------------------------+ Property Value -------------------------------------------------+ uuid 71b35de7-93bc-4e31-92d2-244571d7ce5e certtype ssl_ca signature ssl_ca_15565961408580913386 start_date 2021-10-28 18:35:30+00:00 expiry_date 2022-10-28 18:35:30+00:00 -------------------------------------------------+ Severity -------- Minor Steps to Reproduce ------------------ Generate Certificate as per documentation Installing/Updating the Docker Registry Certificate Install certificate SSL as SSL CA certificate: system certificate-install -m ssl_ca my-server-cert.pem Expected Behavior ----------------- Failure to install Actual Behavior ---------------- As per the description, there was no failure installed successfully Reproducibility --------------- Not sure seen once System Configuration -------------------- IPv6, AIO-DX subcloud Branch/Pull Time/Commit ----------------------- StarlingX 5.0 Last Pass --------- Not sure. This was tested Timestamp/Logs -------------- /fo Alarms ------ No alarms Test Activity ------------- This issue was found during the upgrade test setup Workaround ---------- Reinstall the with ssl_ca certificate Brief Description ----------------- System allow to install ssl certificate as ssl_ca certificate. There was no failure or error installation as below. [root@controller-0 (keystone_admin)]# system certificate-install -m ssl_ca my-server-cert.pem WARNING: For security reasons, the original certificate, containing the private key, will be removed, once the private key is processed. -------------------------------------------------+ Property Value -------------------------------------------------+ uuid 71b35de7-93bc-4e31-92d2-244571d7ce5e certtype ssl_ca signature ssl_ca_15565961408580913386 start_date 2021-10-28 18:35:30+00:00 expiry_date 2022-10-28 18:35:30+00:00 -------------------------------------------------+ Severity -------- Minor Steps to Reproduce ------------------ Generate Certificate as per documentation Certificate Configuration (https://docs.starlingx.io/configuration/cert_config.html) Install certificate SSL as SSL CA certificate: system certificate-install -m ssl_ca my-server-cert.pem Expected Behavior ----------------- Failure to install Actual Behavior ---------------- As per the description, there was no failure installed successfully Reproducibility --------------- Not sure seen once System Configuration -------------------- IPv6, AIO-DX subcloud Branch/Pull Time/Commit ----------------------- StarlingX 5.0 Last Pass --------- Not sure. This was tested Timestamp/Logs -------------- /fo Alarms ------ No alarms Test Activity ------------- This issue was found during the upgrade test setup Workaround ---------- Reinstall the with ssl_ca certificate
2021-12-14 14:20:33 Ghada Khalil starlingx: assignee Alexandre Horst (ahorst)
2021-12-14 14:20:38 Ghada Khalil starlingx: importance Undecided Low
2021-12-14 14:20:52 Ghada Khalil tags stx.7.0 stx.security
2021-12-14 19:59:50 OpenStack Infra starlingx: status In Progress Fix Released