RHOSP13- R5.0-162- ssl certificates are not available

Bug #1785865 reported by alok kumar
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
Juniper Openstack
Status tracked in Trunk
R5.0
New
High
alexey-mr
Trunk
New
High
alexey-mr

Bug Description

ssl certificates on bms nodes(VMs in my case) are not available at /etc/contrail/ssl/

In case we need to enable it in any heat templates, please update the bug accordingly.

right now I see below traceback due to this while running contrail-status:

Traceback (most recent call last):
  File "/root/contrail-status.py", line 449, in <module>
    main()
  File "/root/contrail-status.py", line 445, in main
    contrail_service_status(pods, pod, options)
  File "/root/contrail-status.py", line 291, in contrail_service_status
    options.certfile, options.cacert)
  File "/root/contrail-status.py", line 250, in get_svc_uve_info
    certfile, cacert)
  File "/root/contrail-status.py", line 221, in get_svc_uve_status
    node_status = svc_introspect.get_uve('NodeStatus')
  File "/root/contrail-status.py", line 193, in get_uve
    p = self._load(path)
  File "/root/contrail-status.py", line 182, in _load
    verify=self._cacert, cert=(self._certfile, self._keyfile))
  File "/usr/lib/python2.7/site-packages/requests/api.py", line 72, in get
    return request('get', url, params=params, **kwargs)
  File "/usr/lib/python2.7/site-packages/requests/api.py", line 58, in request
    return session.request(method=method, url=url, **kwargs)
  File "/usr/lib/python2.7/site-packages/requests/sessions.py", line 518, in request
    resp = self.send(prep, **send_kwargs)
  File "/usr/lib/python2.7/site-packages/requests/sessions.py", line 639, in send
    r = adapter.send(request, **kwargs)
  File "/usr/lib/python2.7/site-packages/requests/adapters.py", line 405, in send
    self.cert_verify(conn, request.url, verify, cert)
  File "/usr/lib/python2.7/site-packages/requests/adapters.py", line 225, in cert_verify
    "invalid path: {0}".format(cert_loc))
IOError: Could not find a suitable TLS CA certificate bundle, invalid path: /etc/contrail/ssl/certs/ca-cert.pem

Jeba Paulaiyan (jebap)
tags: added: contrail-cloud
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.