Public bug reported:
In the flow of GET /os-quota-sets/{tenant_id} API, when
project_id/tenant_id is being verified by communicating with keystone
through secure(https)connection at
https://github.com/openstack/nova/blob/master/nova/api/openstack/identity.py#L32,
it is failing in certificate validation error as below.
2017-07-06 01:13:28.134 21365 ERROR nova.api.openstack.identity Traceback (most
recent call last):
2017-07-06 01:13:28.134 21365 ERROR nova.api.openstack.identity File
"/usr/lib/python2.7/site-packages/nova/api/openstack/identity.py", line 42, in
verify_project_id
2017-07-06 01:13:28.134 21365 ERROR nova.api.openstack.identity
raise_exc=False)
2017-07-06 01:13:28.134 21365 ERROR nova.api.openstack.identity File
"/usr/lib/python2.7/site-packages/keystoneauth1/session.py", line 758, in get
2017-07-06 01:13:28.134 21365 ERROR nova.api.openstack.identity return
self.request(url, 'GET', **kwargs)
2017-07-06 01:13:28.134 21365 ERROR nova.api.openstack.identity File
"/usr/lib/python2.7/site-packages/positional/__init__.py", line 101, in inner
2017-07-06 01:13:28.134 21365 ERROR nova.api.openstack.identity return
wrapped(*args, **kwargs)
2017-07-06 01:13:28.134 21365 ERROR nova.api.openstack.identity File
"/usr/lib/python2.7/site-packages/keystoneauth1/session.py", line 616, in
request
2017-07-06 01:13:28.134 21365 ERROR nova.api.openstack.identity resp =
send(**kwargs)
2017-07-06 01:13:28.134 21365 ERROR nova.api.openstack.identity File
"/usr/lib/python2.7/site-packages/keystoneauth1/session.py", line 678, in
_send_request
2017-07-06 01:13:28.134 21365 ERROR nova.api.openstack.identity raise
exceptions.SSLError(msg)
2017-07-06 01:13:28.134 21365 ERROR nova.api.openstack.identity SSLError: SSL
exception connecting to
https://xxx.xxx.xxx.xxx:5000/v3/projects/0fe761dc32934fc88c390d244acb6971:
("bad handshake: Error([('SSL routines', 'SSL3_GET_SERVER_CERTIFICATE',
'certificate verify failed')],)",)
2017-07-06 01:13:28.134 21365 ERROR nova.api.openstack.identity
** Affects: nova
Importance: Undecided
Status: New
--
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to OpenStack Compute (nova).
https://bugs.launchpad.net/bugs/1704798
Title:
GET /os-quota-sets/{tenant_id} API is failing with SSL exception
Status in OpenStack Compute (nova):
New
Bug description:
In the flow of GET /os-quota-sets/{tenant_id} API, when
project_id/tenant_id is being verified by communicating with keystone
through secure(https)connection at
https://github.com/openstack/nova/blob/master/nova/api/openstack/identity.py#L32,
it is failing in certificate validation error as below.
2017-07-06 01:13:28.134 21365 ERROR nova.api.openstack.identity Traceback
(most recent call last):
2017-07-06 01:13:28.134 21365 ERROR nova.api.openstack.identity File
"/usr/lib/python2.7/site-packages/nova/api/openstack/identity.py", line 42, in
verify_project_id
2017-07-06 01:13:28.134 21365 ERROR nova.api.openstack.identity
raise_exc=False)
2017-07-06 01:13:28.134 21365 ERROR nova.api.openstack.identity File
"/usr/lib/python2.7/site-packages/keystoneauth1/session.py", line 758, in get
2017-07-06 01:13:28.134 21365 ERROR nova.api.openstack.identity return
self.request(url, 'GET', **kwargs)
2017-07-06 01:13:28.134 21365 ERROR nova.api.openstack.identity File
"/usr/lib/python2.7/site-packages/positional/__init__.py", line 101, in inner
2017-07-06 01:13:28.134 21365 ERROR nova.api.openstack.identity return
wrapped(*args, **kwargs)
2017-07-06 01:13:28.134 21365 ERROR nova.api.openstack.identity File
"/usr/lib/python2.7/site-packages/keystoneauth1/session.py", line 616, in
request
2017-07-06 01:13:28.134 21365 ERROR nova.api.openstack.identity resp =
send(**kwargs)
2017-07-06 01:13:28.134 21365 ERROR nova.api.openstack.identity File
"/usr/lib/python2.7/site-packages/keystoneauth1/session.py", line 678, in
_send_request
2017-07-06 01:13:28.134 21365 ERROR nova.api.openstack.identity raise
exceptions.SSLError(msg)
2017-07-06 01:13:28.134 21365 ERROR nova.api.openstack.identity SSLError: SSL
exception connecting to
https://xxx.xxx.xxx.xxx:5000/v3/projects/0fe761dc32934fc88c390d244acb6971:
("bad handshake: Error([('SSL routines', 'SSL3_GET_SERVER_CERTIFICATE',
'certificate verify failed')],)",)
2017-07-06 01:13:28.134 21365 ERROR nova.api.openstack.identity
To manage notifications about this bug go to:
https://bugs.launchpad.net/nova/+bug/1704798/+subscriptions
--
Mailing list: https://launchpad.net/~yahoo-eng-team
Post to : [email protected]
Unsubscribe : https://launchpad.net/~yahoo-eng-team
More help : https://help.launchpad.net/ListHelp
