[Openstack] [Devstack] Enabling services in HTTPS mode

Kevin Benton blak111 at gmail.com
Fri Jan 23 06:53:01 UTC 2015


There are several connections in the neutron logs. After devstack fails,
try running the wget command manually and check the output. There may be a
certificate error that is causing it to abort the connection.

wget --ca-certificate=/opt/stack/data/ca-bundle.pem --no-proxy -q -O-
https://10.102.118.24:9696

On Thu, Jan 22, 2015 at 9:20 PM, Parikshit Manur <parikshit.manur at citrix.com
> wrote:

>  Hi All,
>
>
>
> I am trying to install the devstack  with services being enabled in HTTPS
> mode.
>
> During devstack installation,the neutron-server fails to start. Throws the
> following error.
>
>
>
> 2015-01-21 19:57:04.932 | + screen -S stack -p q-svc -X stuff 'python
> /usr/local/bin/neutron-server --config-file /etc/neutron/neutron.conf
> --config-file /etc/neutron/plugins/ml'/ml2_conf.ini & echo $!
> >/opt/stack/status/stack/q-svc.pid; fg || echo "q-svc failed to start" |
> tee "/opt/stack/status/stack/q-svc.failure"
>
> 2015-01-21 19:57:04.936 | + echo 'Waiting for Neutron to start...'
>
> 2015-01-21 19:57:04.937 | Waiting for Neutron to start...
>
> 2015-01-21 19:57:04.937 | + is_ssl_enabled_service neutron
>
> 2015-01-21 19:57:04.937 | + local services=neutron
>
> 2015-01-21 19:57:04.937 | + local service=
>
> 2015-01-21 19:57:04.937 | + '[' True == False ']'
>
> 2015-01-21 19:57:04.937 | + for service in '${services}'
>
> 2015-01-21 19:57:04.937 | + [[ ,key,nova,cinder,glance,s-proxy,neutron, =~
> ,neutron, ]]
>
> 2015-01-21 19:57:04.937 | + return 0
>
> 2015-01-21 19:57:04.937 | +
> ssl_ca=--ca-certificate=/opt/stack/data/ca-bundle.pem
>
> 2015-01-21 19:57:04.937 | + timeout 60 sh -c 'while ! wget
> --ca-certificate=/opt/stack/data/ca-bundle.pem --no-proxy -q -O-
> https://10.102.118.24:9696; do sleep 1; done'
>
> 2015-01-21 19:58:04.939 | + die 643 'Neutron did not start'
>
> 2015-01-21 19:58:04.940 | + local exitcode=0
>
> 2015-01-21 19:58:04.940 | [Call Trace]
>
> 2015-01-21 19:58:04.940 | ./stack.sh:1254:start_neutron_service_and_check
>
> 2015-01-21 19:58:04.940 | /opt/stack/devstack/lib/neutron:643:die
>
> 2015-01-21 19:58:04.945 | [ERROR] /opt/stack/devstack/lib/neutron:643
> Neutron did not start
>
> 2015-01-21 19:58:05.949 | Error on exit
>
>
>
> Below is the  configuration in localrc file :
>
>
>
> RECLONE=yes
>
> DEST=/opt/stack
>
> SCREEN_LOGDIR=/opt/stack/new/screen-logs
>
> LOGFILE=/opt/stack/new/devstacklog.txt
>
>
>
> DATABASE_PASSWORD=password
>
> RABBIT_PASSWORD= password
>
> SERVICE_TOKEN= password
>
> SERVICE_PASSWORD= password
>
> ADMIN_PASSWORD= password
>
> MYSQL_PASSWORD= password
>
>
>
> disable_service n-net
>
> enable_service q-svc
>
> enable_service q-agt
>
> enable_service q-dhcp
>
> enable_service q-l3
>
> enable_service q-meta
>
> enable_service q-lbaas
>
> enable_service neutron
>
> # Optional, to enable tempest configuration as part of devstack
>
> enable_service tempest
>
>
>
> *USE_SSL=True*
>
> *SSL_ENABLE_SERVICES=key,nova,neutron,glance*
>
>
>
> Q_PLUGIN=ml2
>
> Q_ML2_PLUGIN_MECHANISM_DRIVERS=openvswitch
>
> Q_ML2_PLUGIN_TYPE_DRIVERS=vlan,flat
>
> Q_ML2_TENANT_NETWORK_TYPE=vlan
>
> ML2_VLAN_RANGES=physnet1:1500:1600
>
> ENABLE_TENANT_VLANS=True
>
> PHYSICAL_NETWORK=physnet1
>
> OVS_PHYSICAL_BRIDGE=br-eth1
>
>
>
>
>
> Are there any other options which needs to be passed in localrc.
>
>
>
> Thanks,
>
> Parikshit Manur
>
> _______________________________________________
> Mailing list:
> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
> Post to     : openstack at lists.openstack.org
> Unsubscribe :
> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
>
>


-- 
Kevin Benton
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openstack.org/pipermail/openstack/attachments/20150122/826273da/attachment.html>


More information about the Openstack mailing list