Comment 0 for bug 1293826

Revision history for this message
Giuseppe Galeota (giuseppegaleota) wrote :

If Keystone accepts only HTTPS connections, the trove-taskmanager provide the following error while validate the CA_file.pem:

WARNING keystoneclient.middleware.auth_token [-] Retrying on HTTP connection exception:
[Errno 1] _ssl.c:504: error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed

In order to validate CA_file.pem of Keystone wesholud modify:

 * the $TROVE_PATH/trove/trove/common/remote.py file into rows 45 (NOVA) and 65 (CINDER),
           adding the cacert="/path/to/your/file.pem" ad last parameter in the .Client() function:

                       client = Client(context.user, context.auth_token,
                                                                  project_id=context.tenant,
                                                                   auth_url=PROXY_AUTH_URL, cacert="/path/to/your/file.pem")

 * the /usr/local/lib/python2.7/dist-packages/keystoneclient/middleware/auth_token.py in the rows 720 and 725::
 720: print('#####self.ssl_ca_file', self.ssl_ca_file)
 725: kwargs['verify'] = '/path/to/your/file.pem'