Zaqar websocket ssl failures
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
tripleo |
Fix Released
|
High
|
Jill Rouleau |
Bug Description
ssl requests to zaqar websocket fail.
(undercloud) [stack@undercloud ~]$ openstack overcloud config download
Starting config-download export...
Could not establish a connection to the Zaqar websocket. The command was sent but the answer could not be read.
[SSL: CERTIFICATE_
(undercloud) [stack@undercloud ~]$ openstack messaging queue list
[SSL] PEM lib (_ssl.c:2554)
cert itself is fine,
(undercloud) [stack@undercloud ~]$ openssl s_client -connect 192.168.24.2:9000 -CAfile /etc/pki/
CONNECTED(00000003)
depth=1 CN = Local Signing Authority, CN = 182a169e-
verify return:1
depth=0 CN = 192.168.24.2
verify return:1
---
Certificate chain
0 s:/CN=192.168.24.2
i:/CN=Local Signing Authority/
1 s:/CN=Local Signing Authority/
i:/CN=Local Signing Authority/
---
Server certificate
...
(undercloud) [stack@undercloud ~]$ curl -g -i --cacert "/etc/pki/
/0.16.0 keystoneauth1/3.9.0 python-
T91XyXt0SxMCKdx
HTTP/1.1 200 OK
Server: AutobahnPython/
Content-Type: text/html; charset=UTF-8
Content-Length: 820
Source RPM : python-
Changed in tripleo: | |
importance: | Undecided → High |
milestone: | none → stein-1 |
status: | New → Triaged |
tags: | added: rocky-backport-potential |
tags: | added: queens-backport-potential |
Fix proposed to branch: master /review. openstack. org/601677
Review: https:/