| 2019-01-11 14:26:42 |
Juan Antonio Osorio Robles |
bug |
|
|
added bug |
| 2019-01-11 14:27:02 |
Juan Antonio Osorio Robles |
tripleo: status |
New |
Confirmed |
|
| 2019-01-11 14:27:03 |
Juan Antonio Osorio Robles |
tripleo: importance |
Undecided |
Critical |
|
| 2019-01-11 14:27:06 |
Juan Antonio Osorio Robles |
tripleo: assignee |
|
Juan Antonio Osorio Robles (juan-osorio-robles) |
|
| 2019-01-11 14:27:09 |
Juan Antonio Osorio Robles |
tripleo: milestone |
|
stein-2 |
|
| 2019-01-11 14:27:11 |
Juan Antonio Osorio Robles |
tripleo: milestone |
stein-2 |
stein-3 |
|
| 2019-01-25 08:02:24 |
Juan Antonio Osorio Robles |
summary |
Certmonger post-save command does not work automatically after CA cert renewal |
Certmonger post-save command does not work with renewals |
|
| 2019-01-25 08:05:30 |
Juan Antonio Osorio Robles |
description |
with ssl-enabled undercloud has been running for about a year. The ssl cert expired and was renewed automatically with certmonger. Openstack commands run on the undercloud (stackrc sourced) are returning CERTIFICATE_VERIFY_FAILED. After updating the ca-trust, the commands begin working again.
This is an issue for all certificates requested by certmonger, and it was due to having wrong assumptions about how the post-save command works with certmonger (it doesn't spawn a subshell). |
with ssl-enabled undercloud has been running for about a year. The ssl cert expired and was renewed automatically with certmonger. Openstack commands run on the undercloud (stackrc sourced) are returning CERTIFICATE_VERIFY_FAILED.
This is an issue for all certificates requested by certmonger, and it was due to having wrong assumptions about how the post-save command works with certmonger (it doesn't spawn a subshell).
So, this is an issue for the overcloud as well, with TLS everywhere. |
|
| 2019-01-25 08:06:06 |
Juan Antonio Osorio Robles |
tripleo: status |
Confirmed |
In Progress |
|
| 2019-02-15 17:57:30 |
OpenStack Infra |
tags |
|
in-stable-queens |
|
| 2019-02-16 00:16:18 |
OpenStack Infra |
tags |
in-stable-queens |
in-stable-queens in-stable-rocky |
|
| 2019-03-05 10:37:43 |
Juan Antonio Osorio Robles |
tripleo: status |
In Progress |
Fix Released |
|
