*** This bug is a duplicate of bug 1263872 ***
https://bugs.launchpad.net/bugs/1263872
** This bug has been marked a duplicate of bug 1263872
metadata proxy not support Https Metadata-api
--
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to neutron.
https://bugs.launchpad.net/bugs/1269740
Title:
metadata agent fails with self-signed SSL certs
Status in OpenStack Neutron (virtual network service):
In Progress
Bug description:
When using a self-signed certificate for the network service endpoint,
the metadata agent has to pass the 'insecure' flag to neutronclient.
Otherwise requests will fail due to the failed certificate validity
check.
Grizzly trace:
2013-10-30 16:09:47 ERROR [quantum.agent.metadata.agent] Unexpected error.
Traceback (most recent call last):
File "/usr/lib64/python2.6/site-packages/quantum/agent/metadata/agent.py",
line 86, in __call__
instance_id = self._get_instance_id(req)
File "/usr/lib64/python2.6/site-packages/quantum/agent/metadata/agent.py",
line 110, in _get_instance_id
device_owner=DEVICE_OWNER_ROUTER_INTF)['ports']
File "/usr/lib64/python2.6/site-packages/quantumclient/v2_0/client.py",
line 107, in with_params
ret = self.function(instance, *args, **kwargs)
File "/usr/lib64/python2.6/site-packages/quantumclient/v2_0/client.py",
line 258, in list_ports
**_params)
File "/usr/lib64/python2.6/site-packages/quantumclient/v2_0/client.py",
line 999, in list
for r in self._pagination(collection, path, **params):
File "/usr/lib64/python2.6/site-packages/quantumclient/v2_0/client.py",
line 1012, in _pagination
res = self.get(path, params=params)
File "/usr/lib64/python2.6/site-packages/quantumclient/v2_0/client.py",
line 985, in get
headers=headers, params=params)
File "/usr/lib64/python2.6/site-packages/quantumclient/v2_0/client.py",
line 970, in retry_request
headers=headers, params=params)
File "/usr/lib64/python2.6/site-packages/quantumclient/v2_0/client.py",
line 907, in do_request
resp, replybody = self.httpclient.do_request(action, method, body=body)
File "/usr/lib64/python2.6/site-packages/quantumclient/client.py", line
143, in do_request
self.authenticate()
File "/usr/lib64/python2.6/site-packages/quantumclient/client.py", line
199, in authenticate
raise exceptions.Unauthorized(message=body)
Unauthorized: Server presented certificate that does not match host
d00-1e-c9-4c-44-30.cloud.susestudio.com: {'notAfter': 'Jul 10 12:00:00 2015
GMT', 'subjectAltName': (('DNS', '*.susestudio.com'), ('DNS',
'susestudio.com')), 'subject': ((('countryName', u'US'),),
(('stateOrProvinceName', u'Utah'),), (('localityName', u'Provo'),),
(('organizationName', u'Novell, Inc.'),), (('commonName',
u'*.susestudio.com'),))}
To manage notifications about this bug go to:
https://bugs.launchpad.net/neutron/+bug/1269740/+subscriptions
--
Mailing list: https://launchpad.net/~yahoo-eng-team
Post to : yahoo-eng-team@lists.launchpad.net
Unsubscribe : https://launchpad.net/~yahoo-eng-team
More help : https://help.launchpad.net/ListHelp
