<div dir="ltr"><div><div>hey guy, <br>my production environment is down for two days and I can't fixit.<br><br>I had 3 keystone+swiftproxy nodes, balanced with DNS-RR and endpoints pointing to DNS; keystone running on 5000/35357 and swift on 443, both with self-signed certificate and native ssl;<br><br>Then I've changed the swiftproxy to run on port 8080, disable the native SSL, set up HAProxy(real LB with healthcheck and SSL passthrough) redirecting tcp connections to keystone/swiftproxy nodes and changed keystone endpoints pointing to HAProxy hostname with specific ports. <br><br>What is happening now: Using curl I can access keystone api with -k and passing --cacert, but with keystoneclient, even with OS_CACERT, I can't run any command without the --insecure flag<br><span style="font-family:monospace,monospace"><br>Authorization Failed: <attribute 'message' of 'exceptions.BaseException' objects> (HTTP Unable to establish connection to https</span><br><br>Swift just don't work neither through API or swiftclient. <br><br>Someone could help me please? <br></div>What else should I do to change swift-proxy port and to have a HAProxy pointing to that.?<br><br><br></div>thanks<br clear="all"><div><div><br>-- <br><div class="gmail_signature"><font face="Arial, Helvetica, sans-serif"><b>guilherme</b> \n<br>\<font>t</font> <b>maluf</b><br></font></div>
</div></div></div>