yahoo-eng-team team mailing list archive

Thread
Date
[Bug 1435174] Re: SSLTestCase errors when building Debian package

To: yahoo-eng-team@xxxxxxxxxxxxxxxxxxx
From: Thierry Carrez <thierry.carrez+lp@xxxxxxxxx>
Date: Tue, 07 Apr 2015 21:38:05 -0000
Reply-to: Bug 1435174 <1435174@xxxxxxxxxxxxxxxxxx>
Sender: bounces@xxxxxxxxxxxxx
** Changed in: keystone
       Status: Fix Committed => Fix Released

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to Keystone.
https://bugs.launchpad.net/bugs/1435174

Title:
  SSLTestCase errors when building Debian package

Status in OpenStack Identity (Keystone):
  Fix Released

Bug description:
  Hi,

  I get the bellow issues when building Keystone in Debian (Jessie
  chroot using sbuild). Help from the keystone team would be appreciate
  to resolve this. Cheers! :)

  ======================================================================
  FAIL: keystone.tests.unit.test_ssl.SSLTestCase.test_2way_ssl_with_ipv6_ok
  ----------------------------------------------------------------------
  Traceback (most recent call last):
  _StringException: Traceback (most recent call last):
  _StringException: Empty attachments:
    pythonlogging:''-1
    stderr
    stdout

  pythonlogging:'': {{{
  Adding cache-proxy 'keystone.tests.unit.test_cache.CacheIsolatingProxy' to backend.
  KVS region configuration for os-revoke-driver: {'keystone.kvs.arguments.distributed_lock': True, 'keystone.kvs.arguments.lock_timeout': 6, 'keystone.kvs.backend': 'openstack.kvs.Memory'}
  Using default dogpile sha1_mangle_key as KVS region os-revoke-driver key_mangler
  Starting /usr/lib/python2.7/dist-packages/subunit/run.py on ::1:0
  (8731) wsgi starting up on https://::1:60772/
  (8731) wsgi exited, is_accepting=True
  }}}

  Traceback (most recent call last):
    File "/«PKGBUILDDIR»/keystone/tests/unit/test_ssl.py", line 124, in test_2way_ssl_with_ipv6_ok
      conn.request('GET', '/')
    File "/usr/lib/python2.7/httplib.py", line 1001, in request
      self._send_request(method, url, body, headers)
    File "/usr/lib/python2.7/httplib.py", line 1035, in _send_request
      self.endheaders(body)
    File "/usr/lib/python2.7/httplib.py", line 997, in endheaders
      self._send_output(message_body)
    File "/usr/lib/python2.7/httplib.py", line 850, in _send_output
      self.send(msg)
    File "/usr/lib/python2.7/httplib.py", line 812, in send
      self.connect()
    File "/usr/lib/python2.7/httplib.py", line 1212, in connect
      server_hostname=server_hostname)
    File "/usr/lib/python2.7/ssl.py", line 350, in wrap_socket
      _context=self)
    File "/usr/lib/python2.7/dist-packages/eventlet/green/ssl.py", line 64, in __init__
      ca_certs, do_handshake_on_connect and six.PY2, *args, **kw)
    File "/usr/lib/python2.7/ssl.py", line 566, in __init__
      self.do_handshake()
    File "/usr/lib/python2.7/dist-packages/eventlet/green/ssl.py", line 237, in do_handshake
      super(GreenSSLSocket, self).do_handshake)
    File "/usr/lib/python2.7/dist-packages/eventlet/green/ssl.py", line 109, in _call_trampolining
      return func(*a, **kw)
    File "/usr/lib/python2.7/ssl.py", line 788, in do_handshake
      self._sslobj.do_handshake()
  SSLError: [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:581)

  Traceback (most recent call last):
  _StringException: Empty attachments:
    pythonlogging:''-1
    stderr
    stdout

  pythonlogging:'': {{{
  Adding cache-proxy 'keystone.tests.unit.test_cache.CacheIsolatingProxy' to backend.
  KVS region configuration for os-revoke-driver: {'keystone.kvs.arguments.distributed_lock': True, 'keystone.kvs.arguments.lock_timeout': 6, 'keystone.kvs.backend': 'openstack.kvs.Memory'}
  Using default dogpile sha1_mangle_key as KVS region os-revoke-driver key_mangler
  Starting /usr/lib/python2.7/dist-packages/subunit/run.py on ::1:0
  (8731) wsgi starting up on https://::1:60772/
  (8731) wsgi exited, is_accepting=True
  }}}

  Traceback (most recent call last):
    File "/«PKGBUILDDIR»/keystone/tests/unit/test_ssl.py", line 124, in test_2way_ssl_with_ipv6_ok
      conn.request('GET', '/')
    File "/usr/lib/python2.7/httplib.py", line 1001, in request
      self._send_request(method, url, body, headers)
    File "/usr/lib/python2.7/httplib.py", line 1035, in _send_request
      self.endheaders(body)
    File "/usr/lib/python2.7/httplib.py", line 997, in endheaders
      self._send_output(message_body)
    File "/usr/lib/python2.7/httplib.py", line 850, in _send_output
      self.send(msg)
    File "/usr/lib/python2.7/httplib.py", line 812, in send
      self.connect()
    File "/usr/lib/python2.7/httplib.py", line 1212, in connect
      server_hostname=server_hostname)
    File "/usr/lib/python2.7/ssl.py", line 350, in wrap_socket
      _context=self)
    File "/usr/lib/python2.7/dist-packages/eventlet/green/ssl.py", line 64, in __init__
      ca_certs, do_handshake_on_connect and six.PY2, *args, **kw)
    File "/usr/lib/python2.7/ssl.py", line 566, in __init__
      self.do_handshake()
    File "/usr/lib/python2.7/dist-packages/eventlet/green/ssl.py", line 237, in do_handshake
      super(GreenSSLSocket, self).do_handshake)
    File "/usr/lib/python2.7/dist-packages/eventlet/green/ssl.py", line 109, in _call_trampolining
      return func(*a, **kw)
    File "/usr/lib/python2.7/ssl.py", line 788, in do_handshake
      self._sslobj.do_handshake()
  SSLError: [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:581)

  
  ======================================================================
  FAIL: keystone.tests.unit.test_ssl.SSLTestCase.test_1way_ssl_ok
  ----------------------------------------------------------------------
  Traceback (most recent call last):
  _StringException: Traceback (most recent call last):
  _StringException: Empty attachments:
    pythonlogging:''-1
    stderr
    stdout

  pythonlogging:'': {{{
  Adding cache-proxy 'keystone.tests.unit.test_cache.CacheIsolatingProxy' to backend.
  KVS region configuration for os-revoke-driver: {'keystone.kvs.arguments.distributed_lock': True, 'keystone.kvs.arguments.lock_timeout': 6, 'keystone.kvs.backend': 'openstack.kvs.Memory'}
  Using default dogpile sha1_mangle_key as KVS region os-revoke-driver key_mangler
  Starting /usr/lib/python2.7/dist-packages/subunit/run.py on 127.0.0.1:0
  (8739) wsgi starting up on https://127.0.0.1:35201/
  (8739) wsgi exited, is_accepting=True
  }}}

  Traceback (most recent call last):
    File "/«PKGBUILDDIR»/keystone/tests/unit/test_ssl.py", line 50, in test_1way_ssl_ok
      conn.request('GET', '/')
    File "/usr/lib/python2.7/httplib.py", line 1001, in request
      self._send_request(method, url, body, headers)
    File "/usr/lib/python2.7/httplib.py", line 1035, in _send_request
      self.endheaders(body)
    File "/usr/lib/python2.7/httplib.py", line 997, in endheaders
      self._send_output(message_body)
    File "/usr/lib/python2.7/httplib.py", line 850, in _send_output
      self.send(msg)
    File "/usr/lib/python2.7/httplib.py", line 812, in send
      self.connect()
    File "/usr/lib/python2.7/httplib.py", line 1212, in connect
      server_hostname=server_hostname)
    File "/usr/lib/python2.7/ssl.py", line 350, in wrap_socket
      _context=self)
    File "/usr/lib/python2.7/dist-packages/eventlet/green/ssl.py", line 64, in __init__
      ca_certs, do_handshake_on_connect and six.PY2, *args, **kw)
    File "/usr/lib/python2.7/ssl.py", line 566, in __init__
      self.do_handshake()
    File "/usr/lib/python2.7/dist-packages/eventlet/green/ssl.py", line 237, in do_handshake
      super(GreenSSLSocket, self).do_handshake)
    File "/usr/lib/python2.7/dist-packages/eventlet/green/ssl.py", line 109, in _call_trampolining
      return func(*a, **kw)
    File "/usr/lib/python2.7/ssl.py", line 788, in do_handshake
      self._sslobj.do_handshake()
  SSLError: [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:581)

  Traceback (most recent call last):
  _StringException: Empty attachments:
    pythonlogging:''-1
    stderr
    stdout

  pythonlogging:'': {{{
  Adding cache-proxy 'keystone.tests.unit.test_cache.CacheIsolatingProxy' to backend.
  KVS region configuration for os-revoke-driver: {'keystone.kvs.arguments.distributed_lock': True, 'keystone.kvs.arguments.lock_timeout': 6, 'keystone.kvs.backend': 'openstack.kvs.Memory'}
  Using default dogpile sha1_mangle_key as KVS region os-revoke-driver key_mangler
  Starting /usr/lib/python2.7/dist-packages/subunit/run.py on 127.0.0.1:0
  (8739) wsgi starting up on https://127.0.0.1:35201/
  (8739) wsgi exited, is_accepting=True
  }}}

  Traceback (most recent call last):
    File "/«PKGBUILDDIR»/keystone/tests/unit/test_ssl.py", line 50, in test_1way_ssl_ok
      conn.request('GET', '/')
    File "/usr/lib/python2.7/httplib.py", line 1001, in request
      self._send_request(method, url, body, headers)
    File "/usr/lib/python2.7/httplib.py", line 1035, in _send_request
      self.endheaders(body)
    File "/usr/lib/python2.7/httplib.py", line 997, in endheaders
      self._send_output(message_body)
    File "/usr/lib/python2.7/httplib.py", line 850, in _send_output
      self.send(msg)
    File "/usr/lib/python2.7/httplib.py", line 812, in send
      self.connect()
    File "/usr/lib/python2.7/httplib.py", line 1212, in connect
      server_hostname=server_hostname)
    File "/usr/lib/python2.7/ssl.py", line 350, in wrap_socket
      _context=self)
    File "/usr/lib/python2.7/dist-packages/eventlet/green/ssl.py", line 64, in __init__
      ca_certs, do_handshake_on_connect and six.PY2, *args, **kw)
    File "/usr/lib/python2.7/ssl.py", line 566, in __init__
      self.do_handshake()
    File "/usr/lib/python2.7/dist-packages/eventlet/green/ssl.py", line 237, in do_handshake
      super(GreenSSLSocket, self).do_handshake)
    File "/usr/lib/python2.7/dist-packages/eventlet/green/ssl.py", line 109, in _call_trampolining
      return func(*a, **kw)
    File "/usr/lib/python2.7/ssl.py", line 788, in do_handshake
      self._sslobj.do_handshake()
  SSLError: [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:581)

  
  ======================================================================
  FAIL: keystone.tests.unit.test_ssl.SSLTestCase.test_1way_ssl_with_ipv6_ok
  ----------------------------------------------------------------------
  Traceback (most recent call last):
  _StringException: Traceback (most recent call last):
  _StringException: Empty attachments:
    pythonlogging:''-1
    stderr
    stdout

  pythonlogging:'': {{{
  Adding cache-proxy 'keystone.tests.unit.test_cache.CacheIsolatingProxy' to backend.
  KVS region configuration for os-revoke-driver: {'keystone.kvs.arguments.distributed_lock': True, 'keystone.kvs.arguments.lock_timeout': 6, 'keystone.kvs.backend': 'openstack.kvs.Memory'}
  Using default dogpile sha1_mangle_key as KVS region os-revoke-driver key_mangler
  Starting /usr/lib/python2.7/dist-packages/subunit/run.py on ::1:0
  (8737) wsgi starting up on https://::1:57388/
  (8737) wsgi exited, is_accepting=True
  }}}

  Traceback (most recent call last):
    File "/«PKGBUILDDIR»/keystone/tests/unit/test_ssl.py", line 97, in test_1way_ssl_with_ipv6_ok
      conn.request('GET', '/')
    File "/usr/lib/python2.7/httplib.py", line 1001, in request
      self._send_request(method, url, body, headers)
    File "/usr/lib/python2.7/httplib.py", line 1035, in _send_request
      self.endheaders(body)
    File "/usr/lib/python2.7/httplib.py", line 997, in endheaders
      self._send_output(message_body)
    File "/usr/lib/python2.7/httplib.py", line 850, in _send_output
      self.send(msg)
    File "/usr/lib/python2.7/httplib.py", line 812, in send
      self.connect()
    File "/usr/lib/python2.7/httplib.py", line 1212, in connect
      server_hostname=server_hostname)
    File "/usr/lib/python2.7/ssl.py", line 350, in wrap_socket
      _context=self)
    File "/usr/lib/python2.7/dist-packages/eventlet/green/ssl.py", line 64, in __init__
      ca_certs, do_handshake_on_connect and six.PY2, *args, **kw)
    File "/usr/lib/python2.7/ssl.py", line 566, in __init__
      self.do_handshake()
    File "/usr/lib/python2.7/dist-packages/eventlet/green/ssl.py", line 237, in do_handshake
      super(GreenSSLSocket, self).do_handshake)
    File "/usr/lib/python2.7/dist-packages/eventlet/green/ssl.py", line 109, in _call_trampolining
      return func(*a, **kw)
    File "/usr/lib/python2.7/ssl.py", line 788, in do_handshake
      self._sslobj.do_handshake()
  SSLError: [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:581)

  Traceback (most recent call last):
  _StringException: Empty attachments:
    pythonlogging:''-1
    stderr
    stdout

  pythonlogging:'': {{{
  Adding cache-proxy 'keystone.tests.unit.test_cache.CacheIsolatingProxy' to backend.
  KVS region configuration for os-revoke-driver: {'keystone.kvs.arguments.distributed_lock': True, 'keystone.kvs.arguments.lock_timeout': 6, 'keystone.kvs.backend': 'openstack.kvs.Memory'}
  Using default dogpile sha1_mangle_key as KVS region os-revoke-driver key_mangler
  Starting /usr/lib/python2.7/dist-packages/subunit/run.py on ::1:0
  (8737) wsgi starting up on https://::1:57388/
  (8737) wsgi exited, is_accepting=True
  }}}

  Traceback (most recent call last):
    File "/«PKGBUILDDIR»/keystone/tests/unit/test_ssl.py", line 97, in test_1way_ssl_with_ipv6_ok
      conn.request('GET', '/')
    File "/usr/lib/python2.7/httplib.py", line 1001, in request
      self._send_request(method, url, body, headers)
    File "/usr/lib/python2.7/httplib.py", line 1035, in _send_request
      self.endheaders(body)
    File "/usr/lib/python2.7/httplib.py", line 997, in endheaders
      self._send_output(message_body)
    File "/usr/lib/python2.7/httplib.py", line 850, in _send_output
      self.send(msg)
    File "/usr/lib/python2.7/httplib.py", line 812, in send
      self.connect()
    File "/usr/lib/python2.7/httplib.py", line 1212, in connect
      server_hostname=server_hostname)
    File "/usr/lib/python2.7/ssl.py", line 350, in wrap_socket
      _context=self)
    File "/usr/lib/python2.7/dist-packages/eventlet/green/ssl.py", line 64, in __init__
      ca_certs, do_handshake_on_connect and six.PY2, *args, **kw)
    File "/usr/lib/python2.7/ssl.py", line 566, in __init__
      self.do_handshake()
    File "/usr/lib/python2.7/dist-packages/eventlet/green/ssl.py", line 237, in do_handshake
      super(GreenSSLSocket, self).do_handshake)
    File "/usr/lib/python2.7/dist-packages/eventlet/green/ssl.py", line 109, in _call_trampolining
      return func(*a, **kw)
    File "/usr/lib/python2.7/ssl.py", line 788, in do_handshake
      self._sslobj.do_handshake()
  SSLError: [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:581)

  
  ======================================================================
  FAIL: keystone.tests.unit.test_ssl.SSLTestCase.test_2way_ssl_ok
  ----------------------------------------------------------------------
  Traceback (most recent call last):
  _StringException: Traceback (most recent call last):
  _StringException: Empty attachments:
    pythonlogging:''-1
    stderr
    stdout

  pythonlogging:'': {{{
  Adding cache-proxy 'keystone.tests.unit.test_cache.CacheIsolatingProxy' to backend.
  KVS region configuration for os-revoke-driver: {'keystone.kvs.arguments.distributed_lock': True, 'keystone.kvs.arguments.lock_timeout': 6, 'keystone.kvs.backend': 'openstack.kvs.Memory'}
  Using default dogpile sha1_mangle_key as KVS region os-revoke-driver key_mangler
  Starting /usr/lib/python2.7/dist-packages/subunit/run.py on 127.0.0.1:0
  (8737) wsgi starting up on https://127.0.0.1:50075/
  (8737) wsgi exited, is_accepting=True
  }}}

  Traceback (most recent call last):
    File "/«PKGBUILDDIR»/keystone/tests/unit/test_ssl.py", line 74, in test_2way_ssl_ok
      conn.request('GET', '/')
    File "/usr/lib/python2.7/httplib.py", line 1001, in request
      self._send_request(method, url, body, headers)
    File "/usr/lib/python2.7/httplib.py", line 1035, in _send_request
      self.endheaders(body)
    File "/usr/lib/python2.7/httplib.py", line 997, in endheaders
      self._send_output(message_body)
    File "/usr/lib/python2.7/httplib.py", line 850, in _send_output
      self.send(msg)
    File "/usr/lib/python2.7/httplib.py", line 812, in send
      self.connect()
    File "/usr/lib/python2.7/httplib.py", line 1212, in connect
      server_hostname=server_hostname)
    File "/usr/lib/python2.7/ssl.py", line 350, in wrap_socket
      _context=self)
    File "/usr/lib/python2.7/dist-packages/eventlet/green/ssl.py", line 64, in __init__
      ca_certs, do_handshake_on_connect and six.PY2, *args, **kw)
    File "/usr/lib/python2.7/ssl.py", line 566, in __init__
      self.do_handshake()
    File "/usr/lib/python2.7/dist-packages/eventlet/green/ssl.py", line 237, in do_handshake
      super(GreenSSLSocket, self).do_handshake)
    File "/usr/lib/python2.7/dist-packages/eventlet/green/ssl.py", line 109, in _call_trampolining
      return func(*a, **kw)
    File "/usr/lib/python2.7/ssl.py", line 788, in do_handshake
      self._sslobj.do_handshake()
  SSLError: [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:581)

  Traceback (most recent call last):
  _StringException: Empty attachments:
    pythonlogging:''-1
    stderr
    stdout

  pythonlogging:'': {{{
  Adding cache-proxy 'keystone.tests.unit.test_cache.CacheIsolatingProxy' to backend.
  KVS region configuration for os-revoke-driver: {'keystone.kvs.arguments.distributed_lock': True, 'keystone.kvs.arguments.lock_timeout': 6, 'keystone.kvs.backend': 'openstack.kvs.Memory'}
  Using default dogpile sha1_mangle_key as KVS region os-revoke-driver key_mangler
  Starting /usr/lib/python2.7/dist-packages/subunit/run.py on 127.0.0.1:0
  (8737) wsgi starting up on https://127.0.0.1:50075/
  (8737) wsgi exited, is_accepting=True
  }}}

  Traceback (most recent call last):
    File "/«PKGBUILDDIR»/keystone/tests/unit/test_ssl.py", line 74, in test_2way_ssl_ok
      conn.request('GET', '/')
    File "/usr/lib/python2.7/httplib.py", line 1001, in request
      self._send_request(method, url, body, headers)
    File "/usr/lib/python2.7/httplib.py", line 1035, in _send_request
      self.endheaders(body)
    File "/usr/lib/python2.7/httplib.py", line 997, in endheaders
      self._send_output(message_body)
    File "/usr/lib/python2.7/httplib.py", line 850, in _send_output
      self.send(msg)
    File "/usr/lib/python2.7/httplib.py", line 812, in send
      self.connect()
    File "/usr/lib/python2.7/httplib.py", line 1212, in connect
      server_hostname=server_hostname)
    File "/usr/lib/python2.7/ssl.py", line 350, in wrap_socket
      _context=self)
    File "/usr/lib/python2.7/dist-packages/eventlet/green/ssl.py", line 64, in __init__
      ca_certs, do_handshake_on_connect and six.PY2, *args, **kw)
    File "/usr/lib/python2.7/ssl.py", line 566, in __init__
      self.do_handshake()
    File "/usr/lib/python2.7/dist-packages/eventlet/green/ssl.py", line 237, in do_handshake
      super(GreenSSLSocket, self).do_handshake)
    File "/usr/lib/python2.7/dist-packages/eventlet/green/ssl.py", line 109, in _call_trampolining
      return func(*a, **kw)
    File "/usr/lib/python2.7/ssl.py", line 788, in do_handshake
      self._sslobj.do_handshake()
  SSLError: [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:581)

  
  Ran 5280 tests in 267.908s

  FAILED (failures=4)

To manage notifications about this bug go to:
https://bugs.launchpad.net/keystone/+bug/1435174/+subscriptions
References

[Bug 1435174] [NEW] SSLTestCase errors when building Debian package
From: Thomas Goirand, 2015-03-23