yahoo-eng-team team mailing list archive

[Samuel Matzek <smatzek@xxxxxxxxxx>]

Public bug reported:

The nova.image.glance.py method _determine_curr_major_version fails when
using https with certificate validation to communicate with the glance
server.  The stack looks like this:

2015-12-08 12:26:57.336 31751 ERROR nova.image.glance Traceback (most recent call last):
2015-12-08 12:26:57.336 31751 ERROR nova.image.glance   File "/usr/lib/python2.7/dist-packages/nova/image/glance.py", line 170, in _determine_curr_major_version
2015-12-08 12:26:57.336 31751 ERROR nova.image.glance     response, content = http_client.get('/versions')
2015-12-08 12:26:57.336 31751 ERROR nova.image.glance   File "/usr/lib/python2.7/dist-packages/glanceclient/common/http.py", line 280, in get
2015-12-08 12:26:57.336 31751 ERROR nova.image.glance     return self._request('GET', url, **kwargs)
2015-12-08 12:26:57.336 31751 ERROR nova.image.glance   File "/usr/lib/python2.7/dist-packages/glanceclient/common/http.py", line 261, in _request
2015-12-08 12:26:57.336 31751 ERROR nova.image.glance     raise exc.CommunicationError(message=message)
2015-12-08 12:26:57.336 31751 ERROR nova.image.glance CommunicationError: Error finding address for https://my.glance.server:9292/versions: [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:590)

The root cause is that this method creates an HttpClient to fetch the
versions URI  and it does not pass in the cert validation information.

** Affects: nova
     Importance: Undecided
     Assignee: Samuel Matzek (smatzek)
         Status: New

** Changed in: nova
     Assignee: (unassigned) => Samuel Matzek (smatzek)

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to OpenStack Compute (nova).
https://bugs.launchpad.net/bugs/1524038

Title:
  Determining glance version fails with https

Status in OpenStack Compute (nova):
  New

Bug description:
  The nova.image.glance.py method _determine_curr_major_version fails
  when using https with certificate validation to communicate with the
  glance server.  The stack looks like this:

  2015-12-08 12:26:57.336 31751 ERROR nova.image.glance Traceback (most recent call last):
  2015-12-08 12:26:57.336 31751 ERROR nova.image.glance   File "/usr/lib/python2.7/dist-packages/nova/image/glance.py", line 170, in _determine_curr_major_version
  2015-12-08 12:26:57.336 31751 ERROR nova.image.glance     response, content = http_client.get('/versions')
  2015-12-08 12:26:57.336 31751 ERROR nova.image.glance   File "/usr/lib/python2.7/dist-packages/glanceclient/common/http.py", line 280, in get
  2015-12-08 12:26:57.336 31751 ERROR nova.image.glance     return self._request('GET', url, **kwargs)
  2015-12-08 12:26:57.336 31751 ERROR nova.image.glance   File "/usr/lib/python2.7/dist-packages/glanceclient/common/http.py", line 261, in _request
  2015-12-08 12:26:57.336 31751 ERROR nova.image.glance     raise exc.CommunicationError(message=message)
  2015-12-08 12:26:57.336 31751 ERROR nova.image.glance CommunicationError: Error finding address for https://my.glance.server:9292/versions: [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:590)

  The root cause is that this method creates an HttpClient to fetch the
  versions URI  and it does not pass in the cert validation information.

To manage notifications about this bug go to:
https://bugs.launchpad.net/nova/+bug/1524038/+subscriptions