[openstack-dev] Looking for help getting git-review to work over https

KARR, DAVID dk068x at att.com
Thu Jun 11 19:57:29 UTC 2015

I don’t know if ssh is general is blocked.  I’ve been hearing about Corkscrew.  I guess I’ll try installing it on my CentOS7 VM.  Does anyone know if this page is accurate: http://www.confignotes.com/2013/10/corkscrew/ ?

From: Paul Michali [mailto:pc at michali.net]
Sent: Thursday, June 11, 2015 11:09 AM
To: OpenStack Development Mailing List (not for usage questions)
Subject: Re: [openstack-dev] Looking for help getting git-review to work over https

Do you know if you have SSH access to the outside world through the firewall?

Did you setup a proxy? I setup 'corkscrew' under Ubuntu. After installing, created a .ssh/config file with:

Host review.openstack.org<http://review.openstack.org>
    ProxyCommand corkscrew <proxy-host> 80 %h %p

The proxy host is one that allows HTTP/HTTPS to outside world and corkscrew tunnels the SSH through to port 80.



On Thu, Jun 11, 2015 at 12:44 PM KARR, DAVID <dk068x at att.com<mailto:dk068x at att.com>> wrote:
Thanks for replying.

% git review -vs
2015-06-11 09:30:38.396076 Running: git log --color=never --oneline HEAD^1..HEAD
2015-06-11 09:30:38.399021 Running: git remote
2015-06-11 09:30:38.401033 Running: git config --get gitreview.username
No remote set, testing ssh://dk068x@review.openstack.org:29418/openstack/horizon.git<http://dk068x@review.openstack.org:29418/openstack/horizon.git>
2015-06-11 09:30:38.402988 Running: git push --dry-run ssh://dk068x@review.openstack.org:29418/openstack/horizon.git<http://dk068x@review.openstack.org:29418/openstack/horizon.git> --all
ssh://dk068x@review.openstack.org:29418/openstack/horizon.git<http://dk068x@review.openstack.org:29418/openstack/horizon.git> did not work.
Could not connect to gerrit.
Enter your gerrit username:

This output is interesting, because I followed the instructions to set the scheme and port to https and 443, which can be seen from:
% git config --global -l
user.name<http://user.name>=David Karr
user.email=dk068x at att.com<mailto:dk068x at att.com>

Concerning the question ‘Do you have "gerrit" remote already configured?’, I guess I’d have to say I don’t know. I’ve followed instructions for setting up my pub key, but I’m not sure exactly what is entailed in “gerrit remote”.

I can get to https://review.openstack.org/ from my browser and from the command line with curl.

The “ls-remote” command returns without error (or any other output).

From: Yuriy Taraday [mailto:yorik.sar at gmail.com<mailto:yorik.sar at gmail.com>]
Sent: Thursday, June 11, 2015 9:19 AM
To: OpenStack Development Mailing List (not for usage questions)
Subject: Re: [openstack-dev] Looking for help getting git-review to work over https

On Thu, Jun 11, 2015, 18:09 KARR, DAVID <dk068x at att.com<mailto:dk068x at att.com>> wrote:

I could use some help with setting up git-review in a slightly unfriendly firewall situation.

I'm trying to set up git-review on my CentOS7 VM, and our firewall blocks the non-standard ssh port.  I'm following the instructions at http://docs.openstack.org/infra/manual/developers.html#accessing-gerrit-over-https , for configuring git-review to use https on port 443, but this still isn't working (times out with "Could not connect to gerrit").  I've confirmed that I can reach other external sites on port 443.

Can someone give me a hand with this?


- Can you please post all output from "git review -vs"?

- Do you have "gerrit" remote already configured?

- Do you have access to https://review.openstack.org/ from your browser?

- Can you access it from command line (via "curl -I https://review.openstack.org/" for example)?

- Does "git ls-remote https://review.openstack.org/openstack/nova > /dev/null" produce and error?
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: OpenStack-dev-request at lists.openstack.org?subject:unsubscribe<http://OpenStack-dev-request@lists.openstack.org?subject:unsubscribe>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openstack.org/pipermail/openstack-dev/attachments/20150611/912f7a01/attachment-0001.html>

More information about the OpenStack-dev mailing list