yahoo-eng-team team mailing list archive

[Thierry Carrez <thierry.carrez+lp@xxxxxxxxx>]

** Changed in: nova
       Status: Fix Committed => Fix Released

** Changed in: nova
    Milestone: None => kilo-2

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to OpenStack Compute (nova).
https://bugs.launchpad.net/bugs/1404390

Title:
  Python 2.7.9 breaks
  nova.tests.unit.test_wsgi.TestWSGIServerWithSSL.test_app_using_ipv6_and_ssl

Status in OpenStack Compute (Nova):
  Fix Released

Bug description:
  nova git version is 2014.2-1545-gd442187 (ie master as of now).

  Python 2.7.9, with its securing the network by default (PEP 466),
  causes the test to fail:

      URLError: <urlopen error [SSL: CERTIFICATE_VERIFY_FAILED]
  certificate verify failed (_ssl.c:581)>

  if i pass the test ca file through urlopen(), for academic purposes as
  it's not backwards compatible, i find that the server cert is ipv4
  only:

      CertificateError: hostname '::1' doesn't match u'0.0.0.0'

  a new certificate is needed, but only the ca's public cert is
  provided, so the old ca is useless for signing a new ipv4 & ipv6
  certificate.

  if i create a new ca and a new certificate and switch to the responses
  python package (to enable ssl verification and full 2.7.x
  compatibility), then everything works and i have
  https://review.openstack.org/143072.

To manage notifications about this bug go to:
https://bugs.launchpad.net/nova/+bug/1404390/+subscriptions