yahoo-eng-team team mailing list archive

[Matt Riedemann <mriedem.os@xxxxxxxxx>]

** Changed in: nova
     Assignee: Sean Dague (sdague) => jichenjc (jichenjc)

** Changed in: nova
   Importance: Undecided => Medium

** Also affects: nova/pike
   Importance: Undecided
       Status: New

** Changed in: nova/pike
       Status: New => In Progress

** Changed in: nova/pike
     Assignee: (unassigned) => jichenjc (jichenjc)

** Changed in: nova/pike
   Importance: Undecided => Medium

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to OpenStack Compute (nova).
https://bugs.launchpad.net/bugs/1704798

Title:
  GET /os-quota-sets/{tenant_id} API is failing with SSL exception

Status in OpenStack Compute (nova):
  Fix Released
Status in OpenStack Compute (nova) pike series:
  In Progress

Bug description:
  In the flow of GET /os-quota-sets/{tenant_id} API, when
  project_id/tenant_id is being verified by communicating with keystone
  through secure(https)connection at
  https://github.com/openstack/nova/blob/master/nova/api/openstack/identity.py#L32,
  it is failing in certificate validation error as below.

  
  2017-07-06 01:13:28.134 21365 ERROR nova.api.openstack.identity Traceback (most recent call last):
  2017-07-06 01:13:28.134 21365 ERROR nova.api.openstack.identity   File "/usr/lib/python2.7/site-packages/nova/api/openstack/identity.py", line 42, in verify_project_id
  2017-07-06 01:13:28.134 21365 ERROR nova.api.openstack.identity     raise_exc=False)
  2017-07-06 01:13:28.134 21365 ERROR nova.api.openstack.identity   File "/usr/lib/python2.7/site-packages/keystoneauth1/session.py", line 758, in get
  2017-07-06 01:13:28.134 21365 ERROR nova.api.openstack.identity     return self.request(url, 'GET', **kwargs)
  2017-07-06 01:13:28.134 21365 ERROR nova.api.openstack.identity   File "/usr/lib/python2.7/site-packages/positional/__init__.py", line 101, in inner
  2017-07-06 01:13:28.134 21365 ERROR nova.api.openstack.identity     return wrapped(*args, **kwargs)
  2017-07-06 01:13:28.134 21365 ERROR nova.api.openstack.identity   File "/usr/lib/python2.7/site-packages/keystoneauth1/session.py", line 616, in request
  2017-07-06 01:13:28.134 21365 ERROR nova.api.openstack.identity     resp = send(**kwargs)
  2017-07-06 01:13:28.134 21365 ERROR nova.api.openstack.identity   File "/usr/lib/python2.7/site-packages/keystoneauth1/session.py", line 678, in _send_request
  2017-07-06 01:13:28.134 21365 ERROR nova.api.openstack.identity     raise exceptions.SSLError(msg)
  2017-07-06 01:13:28.134 21365 ERROR nova.api.openstack.identity SSLError: SSL exception connecting to https://xxx.xxx.xxx.xxx:5000/v3/projects/0fe761dc32934fc88c390d244acb6971: ("bad handshake: Error([('SSL routines', 'SSL3_GET_SERVER_CERTIFICATE', 'certificate verify failed')],)",)
  2017-07-06 01:13:28.134 21365 ERROR nova.api.openstack.identity

To manage notifications about this bug go to:
https://bugs.launchpad.net/nova/+bug/1704798/+subscriptions