Fuel for OpenStack

  1. Series newton
  2. Bug #1559067
  3. Comment #0

Comment 0 for bug 1559067

Revision history for this message
Artem Savinov (asavinov) wrote : Glance with vmware backend - certificate verify failed

Service glance-api not start .

Steps to reproduce:
Deploy Feul 9 #78 with nsxv-fuel- plugin and enable "VMware vCenter/ESXi datastore for images (Glance)" from Settings tab-> Storage.

Expected results: glance work fine.

Actual result: glance-api service not start, with error:

2016-03-18 10:42:45.331 18566 CRITICAL glance [-] SSLError: [Errno 1] _ssl.c:510: error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed
2016-03-18 10:42:45.331 18566 ERROR glance Traceback (most recent call last):
2016-03-18 10:42:45.331 18566 ERROR glance File "/usr/bin/glance-api", line 10, in <module>
2016-03-18 10:42:45.331 18566 ERROR glance sys.exit(main())
2016-03-18 10:42:45.331 18566 ERROR glance File "/usr/lib/python2.7/dist-packages/glance/cmd/api.py", line 91, in main
2016-03-18 10:42:45.331 18566 ERROR glance server.start(config.load_paste_app('glance-api'), default_port=9292)
2016-03-18 10:42:45.331 18566 ERROR glance File "/usr/lib/python2.7/dist-packages/glance/common/wsgi.py", line 311, in start
2016-03-18 10:42:45.331 18566 ERROR glance self.configure()
2016-03-18 10:42:45.331 18566 ERROR glance File "/usr/lib/python2.7/dist-packages/glance/common/wsgi.py", line 387, in configure
2016-03-18 10:42:45.331 18566 ERROR glance initialize_glance_store()
2016-03-18 10:42:45.331 18566 ERROR glance File "/usr/lib/python2.7/dist-packages/glance/common/wsgi.py", line 233, in initialize_glance_store
2016-03-18 10:42:45.331 18566 ERROR glance glance_store.create_stores(CONF)
2016-03-18 10:42:45.331 18566 ERROR glance File "/usr/lib/python2.7/dist-packages/glance_store/backend.py", line 189, in create_stores
2016-03-18 10:42:45.331 18566 ERROR glance store_instance.configure(re_raise_bsc=False)
2016-03-18 10:42:45.331 18566 ERROR glance File "/usr/lib/python2.7/dist-packages/glance_store/_drivers/vmware_datastore.py", line 282, in configure
2016-03-18 10:42:45.331 18566 ERROR glance self.session = self.reset_session()
2016-03-18 10:42:45.331 18566 ERROR glance File "/usr/lib/python2.7/dist-packages/glance_store/_drivers/vmware_datastore.py", line 249, in reset_session
2016-03-18 10:42:45.331 18566 ERROR glance insecure=self.api_insecure)
2016-03-18 10:42:45.331 18566 ERROR glance File "/usr/lib/python2.7/dist-packages/oslo_vmware/api.py", line 184, in __init__
2016-03-18 10:42:45.331 18566 ERROR glance self._create_session()
2016-03-18 10:42:45.331 18566 ERROR glance File "/usr/lib/python2.7/dist-packages/oslo_vmware/api.py", line 123, in func
2016-03-18 10:42:45.331 18566 ERROR glance return evt.wait()
2016-03-18 10:42:45.331 18566 ERROR glance File "/usr/lib/python2.7/dist-packages/eventlet/event.py", line 121, in wait
2016-03-18 10:42:45.331 18566 ERROR glance return hubs.get_hub().switch()
2016-03-18 10:42:45.331 18566 ERROR glance File "/usr/lib/python2.7/dist-packages/eventlet/hubs/hub.py", line 294, in switch
2016-03-18 10:42:45.331 18566 ERROR glance return self.greenlet.switch()
2016-03-18 10:42:45.331 18566 ERROR glance File "/usr/lib/python2.7/dist-packages/oslo_vmware/common/loopingcall.py", line 124, in _inner
2016-03-18 10:42:45.331 18566 ERROR glance idle = self.f(*self.args, **self.kw)
2016-03-18 10:42:45.331 18566 ERROR glance File "/usr/lib/python2.7/dist-packages/oslo_vmware/api.py", line 96, in _func
2016-03-18 10:42:45.331 18566 ERROR glance result = f(*args, **kwargs)
2016-03-18 10:42:45.331 18566 ERROR glance File "/usr/lib/python2.7/dist-packages/oslo_concurrency/lockutils.py", line 271, in inner
2016-03-18 10:42:45.331 18566 ERROR glance return f(*args, **kwargs)
2016-03-18 10:42:45.331 18566 ERROR glance File "/usr/lib/python2.7/dist-packages/oslo_vmware/api.py", line 231, in _create_session
2016-03-18 10:42:45.331 18566 ERROR glance session_manager = self.vim.service_content.sessionManager
2016-03-18 10:42:45.331 18566 ERROR glance File "/usr/lib/python2.7/dist-packages/oslo_vmware/api.py", line 200, in vim
2016-03-18 10:42:45.331 18566 ERROR glance pool_maxsize=self._pool_size)
2016-03-18 10:42:45.331 18566 ERROR glance File "/usr/lib/python2.7/dist-packages/oslo_vmware/vim.py", line 44, in __init__
2016-03-18 10:42:45.331 18566 ERROR glance pool_maxsize)
2016-03-18 10:42:45.331 18566 ERROR glance File "/usr/lib/python2.7/dist-packages/oslo_vmware/service.py", line 201, in __init__
2016-03-18 10:42:45.331 18566 ERROR glance cache=_CACHE)
2016-03-18 10:42:45.331 18566 ERROR glance File "/usr/lib/python2.7/dist-packages/suds/client.py", line 120, in __init__
2016-03-18 10:42:45.331 18566 ERROR glance self.wsdl = reader.open(url)
2016-03-18 10:42:45.331 18566 ERROR glance File "/usr/lib/python2.7/dist-packages/suds/reader.py", line 104, in open
2016-03-18 10:42:45.331 18566 ERROR glance wsdl = self.fn(url, self.options)
2016-03-18 10:42:45.331 18566 ERROR glance File "/usr/lib/python2.7/dist-packages/suds/wsdl.py", line 164, in __init__
2016-03-18 10:42:45.331 18566 ERROR glance d = reader.open(url)
2016-03-18 10:42:45.331 18566 ERROR glance File "/usr/lib/python2.7/dist-packages/suds/reader.py", line 148, in open
2016-03-18 10:42:45.331 18566 ERROR glance xml = self.__fetch(url)
2016-03-18 10:42:45.331 18566 ERROR glance File "/usr/lib/python2.7/dist-packages/suds/reader.py", line 188, in __fetch
2016-03-18 10:42:45.331 18566 ERROR glance fp = self.options.transport.open(request)
2016-03-18 10:42:45.331 18566 ERROR glance File "/usr/lib/python2.7/dist-packages/oslo_vmware/service.py", line 148, in open
2016-03-18 10:42:45.331 18566 ERROR glance resp = self.session.get(request.url, verify=self.verify)
2016-03-18 10:42:45.331 18566 ERROR glance File "/usr/lib/python2.7/dist-packages/requests/sessions.py", line 480, in get
2016-03-18 10:42:45.331 18566 ERROR glance return self.request('GET', url, **kwargs)
2016-03-18 10:42:45.331 18566 ERROR glance File "/usr/lib/python2.7/dist-packages/requests/sessions.py", line 468, in request
2016-03-18 10:42:45.331 18566 ERROR glance resp = self.send(prep, **send_kwargs)
2016-03-18 10:42:45.331 18566 ERROR glance File "/usr/lib/python2.7/dist-packages/requests/sessions.py", line 576, in send
2016-03-18 10:42:45.331 18566 ERROR glance r = adapter.send(request, **kwargs)
2016-03-18 10:42:45.331 18566 ERROR glance File "/usr/lib/python2.7/dist-packages/requests/adapters.py", line 447, in send
2016-03-18 10:42:45.331 18566 ERROR glance raise SSLError(e, request=request)
2016-03-18 10:42:45.331 18566 ERROR glance SSLError: [Errno 1] _ssl.c:510: error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed

in /etc/glance/glance-api.conf get option vmware_api_insecure=False

Workaround:
set vmware_api_insecure=True in /etc/glance/glance-api.conf