tripleo

undercloud_service_certificate doesn't support certificate chain

Bug #1882594 reported by Jeremy Freudberg
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
tripleo
In Progress
Undecided
Jeremy Freudberg

Bug Description

the option in undercloud.conf DEFAULT/undercloud_service_certificate doesn't support the case when there is a certificate chain, or in other words, intermediate certificate(s).

you can step through the code here to see what i mean https://opendev.org/openstack/python-tripleoclient/src/commit/f66b42757b3141a4cbbd42cc7d2937874b7b78f0/tripleoclient/v1/undercloud_config.py#L867

also, expecting the cert+key in one file, then splitting it apart, then putting it back together is a little silly ;)

Jeremy Freudberg (jfreud)
Changed in tripleo:
assignee: nobody → Jeremy Freudberg (jfreud)
tags: added: tripleo-heat-templates
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to python-tripleoclient (master)

Fix proposed to branch: master
Review: https://review.opendev.org/742739

Changed in tripleo:
status: New → In Progress
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Change abandoned on python-tripleoclient (master)

Change abandoned by "James Slagle <email address hidden>" on branch: master
Review: https://review.opendev.org/c/openstack/python-tripleoclient/+/742739
Reason: Abandoning this patch per the TripleO Patch Abandonment guidelines
(https://specs.openstack.org/openstack/tripleo-specs/specs/policy/patch-abandonment.html).
If you wish to have this restored and cannot do so yourself, please reach out
via #tripleo on OFTC or the OpenStack Dev mailing list.

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.
Subscribing...

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.