undercloud_service_certificate doesn't support certificate chain

Bug #1882594 reported by Jeremy Freudberg
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
tripleo
In Progress
Undecided
Jeremy Freudberg

Bug Description

the option in undercloud.conf DEFAULT/undercloud_service_certificate doesn't support the case when there is a certificate chain, or in other words, intermediate certificate(s).

you can step through the code here to see what i mean https://opendev.org/openstack/python-tripleoclient/src/commit/f66b42757b3141a4cbbd42cc7d2937874b7b78f0/tripleoclient/v1/undercloud_config.py#L867

also, expecting the cert+key in one file, then splitting it apart, then putting it back together is a little silly ;)

Changed in tripleo:
assignee: nobody → Jeremy Freudberg (jfreud)
tags: added: tripleo-heat-templates
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to python-tripleoclient (master)

Fix proposed to branch: master
Review: https://review.opendev.org/742739

Changed in tripleo:
status: New → In Progress
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Change abandoned on python-tripleoclient (master)

Change abandoned by "James Slagle <email address hidden>" on branch: master
Review: https://review.opendev.org/c/openstack/python-tripleoclient/+/742739
Reason: Abandoning this patch per the TripleO Patch Abandonment guidelines
(https://specs.openstack.org/openstack/tripleo-specs/specs/policy/patch-abandonment.html).
If you wish to have this restored and cannot do so yourself, please reach out
via #tripleo on OFTC or the OpenStack Dev mailing list.

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers