|
Dear Ceph Community,
We are trying to integrate Ceph with OpenStack, and facing certificate issues when attaching a Cinder volume to a Nova vm. We have the environment variable OS_CACERT set to the correct certificate address, which is read to set cacert. The certificate
is verified successfully in creating images, volumes, and vms. However when the compute vm tries to communicate with the controller, the certificate fails to verify. Is there a configuration variable that must be set for the certificate to verify correctly?
Any advice is much appreciated.
2015-06-26 23:15:41.526 1437 TRACE oslo.messaging.rpc.dispatcher
2015-06-26 23:15:41.528 1437 ERROR oslo.messaging._drivers.common [-] Returning exception Unable to establish connection: [Errno 1] _ssl.c:492: error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed to caller
2015-06-26 23:15:41.528 1437 ERROR oslo.messaging._drivers.common [-] ['Traceback (most recent call last):\n', ' File "/usr/lib/python2.6/site-packages/oslo/messaging/rpc/dispatcher.py", line 133, in _dispatch_and_reply\n incoming.message))\n', ' File
"/usr/lib/python2.6/site-packages/oslo/messaging/rpc/dispatcher.py", line 176, in _dispatch\n return self._do_dispatch(endpoint, method, ctxt, args)\n', ' File "/usr/lib/python2.6/site-packages/oslo/messaging/rpc/dispatcher.py", line 122, in _do_dispatch\n
result = getattr(endpoint, method)(ctxt, **new_args)\n', ' File "/usr/lib/python2.6/site-packages/nova/compute/manager.py", line 393, in decorated_function\n return function(self, context, *args, **kwargs)\n', ' File "/usr/lib/python2.6/site-packages/nova/exception.py",
line 88, in wrapped\n payload)\n', ' File "/usr/lib/python2.6/site-packages/nova/openstack/common/excutils.py", line 68, in __exit__\n six.reraise(self.type_, self.value, self.tb)\n', ' File "/usr/lib/python2.6/site-packages/nova/exception.py", line
71, in wrapped\n return f(self, context, *args, **kw)\n', ' File "/usr/lib/python2.6/site-packages/nova/compute/manager.py", line 274, in decorated_function\n pass\n', ' File "/usr/lib/python2.6/site-packages/nova/openstack/common/excutils.py", line
68, in __exit__\n six.reraise(self.type_, self.value, self.tb)\n', ' File "/usr/lib/python2.6/site-packages/nova/compute/manager.py", line 260, in decorated_function\n return function(self, context, *args, **kwargs)\n', ' File "/usr/lib/python2.6/site-packages/nova/compute/manager.py",
line 303, in decorated_function\n e, sys.exc_info())\n', ' File "/usr/lib/python2.6/site-packages/nova/openstack/common/excutils.py", line 68, in __exit__\n six.reraise(self.type_, self.value, self.tb)\n', ' File "/usr/lib/python2.6/site-packages/nova/compute/manager.py",
line 290, in decorated_function\n return function(self, context, *args, **kwargs)\n', ' File "/usr/lib/python2.6/site-packages/nova/compute/manager.py", line 4167, in attach_volume\n bdm.destroy(context)\n', ' File "/usr/lib/python2.6/site-packages/nova/openstack/common/excutils.py",
line 68, in __exit__\n six.reraise(self.type_, self.value, self.tb)\n', ' File "/usr/lib/python2.6/site-packages/nova/compute/manager.py", line 4164, in attach_volume\n return self._attach_volume(context, instance, driver_bdm)\n', ' File "/usr/lib/python2.6/site-packages/nova/compute/manager.py",
line 4185, in _attach_volume\n self.volume_api.unreserve_volume(context, bdm.volume_id)\n', ' File "/usr/lib/python2.6/site-packages/nova/volume/cinder.py", line 173, in wrapper\n res = method(self, ctx, volume_id, *args, **kwargs)\n', ' File "/usr/lib/python2.6/site-packages/nova/volume/cinder.py",
line 249, in unreserve_volume\n cinderclient(context).volumes.unreserve(volume_id)\n', ' File "/usr/lib/python2.6/site-packages/cinderclient/v1/volumes.py", line 293, in unreserve\n return self._action(\'os-unreserve\', volume)\n', ' File "/usr/lib/python2.6/site-packages/cinderclient/v1/volumes.py",
line 250, in _action\n return self.api.client.post(url, body=body)\n', ' File "/usr/lib/python2.6/site-packages/cinderclient/client.py", line 223, in post\n return self._cs_request(url, \'POST\', **kwargs)\n', ' File "/usr/lib/python2.6/site-packages/cinderclient/client.py",
line 212, in _cs_request\n raise exceptions.ConnectionError(msg)\n', 'ConnectionError: Unable to establish connection: [Errno 1] _ssl.c:492: error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed\n']
Sincerely,
Johanni B. Thunstrom
|
_______________________________________________ ceph-users mailing list ceph-users@xxxxxxxxxxxxxx http://lists.ceph.com/listinfo.cgi/ceph-users-ceph.com
