zaqar-bench doesn't work with SSL

Bug #1607124 reported by Feilong Wang
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
zaqar
Fix Released
Medium
Feilong Wang

Bug Description

kris@bxl-build:~/zaqar$ zaqar-bench
Using 'envvars' credentials
Using 'keystone' authentication method
Benchmarking Zaqar API v2...
/usr/local/lib/python2.7/dist-packages/requests/packages/urllib3/util/ssl_.py:318: SNIMissingWarning: An HTTPS request has been made, but the SNI (Subject Name Indication) extension to TLS is not available on this platform. This may cause the server to present an incorrect TLS certificate, which can cause validation failures. You can upgrade to a newer version of Python to solve this. For more information, see https://urllib3.readthedocs.org/en/latest/security.html#snimissingwarning.
  SNIMissingWarning
/usr/local/lib/python2.7/dist-packages/requests/packages/urllib3/util/ssl_.py:122: InsecurePlatformWarning: A true SSLContext object is not available. This prevents urllib3 from configuring SSL appropriately and may cause certain SSL connections to fail. You can upgrade to a newer version of Python to solve this. For more information, see https://urllib3.readthedocs.org/en/latest/security.html#insecureplatformwarning.
  InsecurePlatformWarning
Traceback (most recent call last):
  File "/usr/local/bin/zaqar-bench", line 10, in <module>
    sys.exit(main())
  File "/usr/local/lib/python2.7/dist-packages/zaqar/bench/conductor.py", line 58, in main
    _reset_queues()
  File "/usr/local/lib/python2.7/dist-packages/zaqar/bench/conductor.py", line 47, in _reset_queues
    queue = cli.queue(queue_name)
  File "/usr/local/lib/python2.7/dist-packages/zaqarclient/queues/v2/client.py", line 62, in queue
    return queues.Queue(self, ref, **kwargs)
  File "/usr/local/lib/python2.7/dist-packages/zaqarclient/queues/v1/queues.py", line 54, in __init__
    self.ensure_exists(force_create=force_create)
  File "/usr/local/lib/python2.7/dist-packages/zaqarclient/queues/v1/queues.py", line 75, in ensure_exists
    req, trans = self.client._request_and_transport()
  File "/usr/local/lib/python2.7/dist-packages/zaqarclient/queues/v1/client.py", line 76, in _request_and_transport
    api=self.api_version)
  File "/usr/local/lib/python2.7/dist-packages/zaqarclient/transport/request.py", line 48, in prepare_request
    req = auth_backend.authenticate(1, req)
  File "/usr/local/lib/python2.7/dist-packages/zaqarclient/auth/keystone.py", line 85, in authenticate
    _ksclient = self._get_ksclient(**ks_kwargs)
  File "/usr/local/lib/python2.7/dist-packages/zaqarclient/auth/keystone.py", line 54, in _get_ksclient
    return ksclient.Client(**kwargs)
  File "/usr/local/lib/python2.7/dist-packages/keystoneclient/v2_0/client.py", line 176, in __init__
    self.authenticate()
  File "/usr/local/lib/python2.7/dist-packages/positional/__init__.py", line 101, in inner
    return wrapped(*args, **kwargs)
  File "/usr/local/lib/python2.7/dist-packages/keystoneclient/httpclient.py", line 578, in authenticate
    resp = self.get_raw_token_from_identity_service(**kwargs)
  File "/usr/local/lib/python2.7/dist-packages/keystoneclient/v2_0/client.py", line 220, in get_raw_token_from_identity_service
    _("Authorization Failed: %s") % e)
keystoneauth1.exceptions.auth.AuthorizationFailure: Authorization Failed: SSL exception connecting to https://public.fuel.local:5000/v2.0/tokens: [Errno 1] _ssl.c:510: error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed

Feilong Wang (flwang)
Changed in zaqar:
importance: Undecided → Medium
milestone: none → newton-3
status: New → In Progress
assignee: nobody → Fei Long Wang (flwang)
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to zaqar (master)

Fix proposed to branch: master
Review: https://review.openstack.org/348107

Thomas Herve (therve)
Changed in zaqar:
milestone: newton-3 → next
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to zaqar (master)

Reviewed: https://review.openstack.org/348107
Committed: https://git.openstack.org/cgit/openstack/zaqar/commit/?id=35deeef79839d68f57a492fe5522c106309ce332
Submitter: Jenkins
Branch: master

commit 35deeef79839d68f57a492fe5522c106309ce332
Author: Fei Long Wang <email address hidden>
Date: Thu Jul 28 11:40:46 2016 +1200

    Fix SSL and verbose issue of zaqar bench

    Currently, Zaqar bench doesn't pass insecure or cert when build
    Zaqar client which cause it doesn't work with SSL. This patch
    fix it and also deprecates the 'verbose' option which is replaced
    with 'debug'.

    Closes-Bug: #1607124

    Change-Id: I7411b9a310abb5e51f91bac0766a6fe7d684741c

Changed in zaqar:
status: In Progress → Fix Released
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix included in openstack/zaqar 4.0.0.0b2

This issue was fixed in the openstack/zaqar 4.0.0.0b2 development milestone.

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.