Trove doesn't work with Keystone that accepts HTTPS connections

[Giuseppe Galeota]

If Keystone accepts only HTTPS connections, the trove-taskmanager provides the following error while validate the CA_file.pem:

WARNING keystoneclient.middleware.auth_token [-] Retrying on HTTP connection exception:[Errno 1] _ssl.c:504:error:14090086:SSLroutines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed

In order to validate CA_file.pem of Keystone, we should modify:

 * the $TROVE_PATH/trove/trove/common/remote.py file into rows 45 (NOVA) and 65 (CINDER), adding the cacert="/path/to/your/file.pem" ad last parameter in the .Client() function:

    client = Client(context.user, context.auth_token, project_id=context.tenant,auth_url=PROXY_AUTH_URL,cacert="/path/to/your/file.pem")

 * the /usr/local/lib/python2.7/dist-packages/keystoneclient/middleware/auth_token.py in the rows 720 and 725:

    720: print('#####self.ssl_ca_file', self.ssl_ca_file)
    725: kwargs['verify'] = '/path/to/your/file.pem'

[Michael Basnight (hubcap)]

The description has the info needed to fix this. thx giuseppe!

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: master
Review: https://review.openstack.org/84484

[OpenStack Infra (hudson-openstack)]

Change abandoned by Nikhil Manchanda (<email address hidden>) on branch: master
Review: https://review.openstack.org/84484
Reason: Review clean up.

Abandoning since the last update > 5 weeks ago.

Please restore if patch is still in progress.

[Matthew Taylor (matthew-taylor-f)]

Is this still being looked after? It is still an issue in Kilo with SSL enabled on services.

[Amrith Kumar (amrith)]

To check if this is still an issue