Reviewed: https://review.openstack.org/245945 Committed: https://git.openstack.org/cgit/openstack/neutron/commit/?id=7a306e2918775ebb94d9e1408aaa2b7c3ed26fc6 Submitter: Jenkins Branch: master
commit 7a306e2918775ebb94d9e1408aaa2b7c3ed26fc6 Author: Vincent Untz <[email protected]> Date: Tue Nov 17 17:47:56 2015 +0100 Ensure metadata agent doesn't use SSL for UNIX socket The communication between the ns metadata proxy and the metadata agent is pure HTTP, and should not switch to HTTPS when neutron is using SSL. We're therefore telling wsgi.Server to forcefully disable SSL in that case. Change-Id: I2cb9fa231193bcd5c721c4d5cf0eb9c16e842349 Closes-Bug: #1514424 ** Changed in: neutron Status: In Progress => Fix Released -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is subscribed to neutron. https://bugs.launchpad.net/bugs/1514424 Title: neutron metadata ns proxy does not support ssl Status in neutron: Fix Released Bug description: When SSL is enabled in the neutron metadata agent the neutron metadata ns proxy isn't able to communicate to the neutron metadata agent via the unix domain socket and every request results in a BadStatusLine error: 2015-11-06 16:30:44.060 269669 INFO neutron.wsgi [-] 192.168.0.2 - - [06/Nov/2015 16:30:44] "GET /2009-04-04/meta-data/instance-id HTTP/1.1" 500 343 12.021586 2015-11-06 16:30:56.064 269669 INFO neutron.wsgi [-] (269669) accepted ('192.168.0.2', 50879) 2015-11-06 16:30:56.071 269669 ERROR neutron.agent.metadata.namespace_proxy [-] Unexpected error. 2015-11-06 16:30:56.071 269669 ERROR neutron.agent.metadata.namespace_proxy Traceback (most recent call last): 2015-11-06 16:30:56.071 269669 ERROR neutron.agent.metadata.namespace_proxy File "/usr/lib/python2.7/dist-packages/neutron/agent/metadata/namespace_proxy.py", line 56, in __call__ 2015-11-06 16:30:56.071 269669 ERROR neutron.agent.metadata.namespace_proxy req.body) 2015-11-06 16:30:56.071 269669 ERROR neutron.agent.metadata.namespace_proxy File "/usr/lib/python2.7/dist-packages/neutron/agent/metadata/namespace_proxy.py", line 88, in _proxy_request 2015-11-06 16:30:56.071 269669 ERROR neutron.agent.metadata.namespace_proxy connection_type=agent_utils.UnixDomainHTTPConnection) 2015-11-06 16:30:56.071 269669 ERROR neutron.agent.metadata.namespace_proxy File "/usr/lib/python2.7/dist-packages/httplib2/__init__.py", line 1569, in request 2015-11-06 16:30:56.071 269669 ERROR neutron.agent.metadata.namespace_proxy (response, content) = self._request(conn, authority, uri, request_uri, method, body, headers, redirections, cachekey) 2015-11-06 16:30:56.071 269669 ERROR neutron.agent.metadata.namespace_proxy File "/usr/lib/python2.7/dist-packages/httplib2/__init__.py", line 1316, in _request 2015-11-06 16:30:56.071 269669 ERROR neutron.agent.metadata.namespace_proxy (response, content) = self._conn_request(conn, request_uri, method, body, headers) 2015-11-06 16:30:56.071 269669 ERROR neutron.agent.metadata.namespace_proxy File "/usr/lib/python2.7/dist-packages/httplib2/__init__.py", line 1285, in _conn_request 2015-11-06 16:30:56.071 269669 ERROR neutron.agent.metadata.namespace_proxy response = conn.getresponse() 2015-11-06 16:30:56.071 269669 ERROR neutron.agent.metadata.namespace_proxy File "/usr/lib/python2.7/httplib.py", line 1051, in getresponse 2015-11-06 16:30:56.071 269669 ERROR neutron.agent.metadata.namespace_proxy response.begin() 2015-11-06 16:30:56.071 269669 ERROR neutron.agent.metadata.namespace_proxy File "/usr/lib/python2.7/httplib.py", line 415, in begin 2015-11-06 16:30:56.071 269669 ERROR neutron.agent.metadata.namespace_proxy version, status, reason = self._read_status() 2015-11-06 16:30:56.071 269669 ERROR neutron.agent.metadata.namespace_proxy File "/usr/lib/python2.7/httplib.py", line 379, in _read_status 2015-11-06 16:30:56.071 269669 ERROR neutron.agent.metadata.namespace_proxy raise BadStatusLine(line) 2015-11-06 16:30:56.071 269669 ERROR neutron.agent.metadata.namespace_proxy BadStatusLine: '' 2015-11-06 16:30:56.071 269669 ERROR neutron.agent.metadata.namespace_proxy It seems that the neutron metadata ns proxy does not support SSL for the communication. To manage notifications about this bug go to: https://bugs.launchpad.net/neutron/+bug/1514424/+subscriptions -- Mailing list: https://launchpad.net/~yahoo-eng-team Post to : [email protected] Unsubscribe : https://launchpad.net/~yahoo-eng-team More help : https://help.launchpad.net/ListHelp
