<div dir="ltr">I've seen this question come up a couple times now; this error handling here needs to be improved with a decent error message.<div><br></div><div>I opened a bug on the issue: <a href="https://bugs.launchpad.net/keystone/+bug/1103569">https://bugs.launchpad.net/keystone/+bug/1103569</a></div>
</div><div class="gmail_extra"><br clear="all"><div><div><br></div>-Dolph</div>
<br><br><div class="gmail_quote">On Wed, Jan 23, 2013 at 11:04 AM, Adam Young <span dir="ltr"><<a href="mailto:ayoung@redhat.com" target="_blank">ayoung@redhat.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">

  
    
  
  <div bgcolor="#FFFFFF" text="#000000">
    <div>On 01/23/2013 06:34 AM, Trinath
      Somanchi wrote:<br>
    </div>
    <blockquote type="cite">
      <div dir="ltr">Hi Stackers-
        <div><br>
        </div>
        <div>I have installed glance and Keystone and configured them.</div>
      </div>
    </blockquote>
    <br>
    Not sure how you installed, but you need to make sure the PKI
    provisioning is done.  You can do it by hand with the
    keystone_manage command.  Make sure you run it as the user that
    Keystone is going to run as, as it creates the certificates and
    Keystone (ajnd only Keystone) needs to be able to access those.<br>
    <br>
    <blockquote type="cite">
      <div dir="ltr">
        <div><br>
        </div>
        <div>But When I upload a test image with glance, I got this
          error in keystone logs</div>
        <div><br>
        </div>
        <div>
          <div>(sqlalchemy.engine.base.Engine): 2013-01-23 17:04:57,904
            INFO ('106298a47e5a4d129c7b8571e188c51e', 1)</div>
          <div>(keystone.common.cms): 2013-01-23 17:04:57,990 ERROR
            Signing error: Error opening signer certificate
            /etc/keystone/ssl/certs/signing_cert.pem</div>
          <div>140702974211744:error:02001002:system library:fopen:No
            such file or
directory:bss_file.c:398:fopen('/etc/keystone/ssl/certs/signing_cert.pem','r')</div>
          <div>140702974211744:error:20074002:BIO
            routines:FILE_CTRL:system lib:bss_file.c:400:</div>
          <div>unable to load certificate</div>
          <div><br>
          </div>
          <div>(root): 2013-01-23 17:04:57,991 ERROR Command 'openssl'
            returned non-zero exit status 3</div>
          <div>Traceback (most recent call last):</div>
          <div>  File
            "/usr/local/lib/python2.7/dist-packages/keystone-2013.1-py2.7.egg/keystone/common/wsgi.py",
            line 215, in __call__</div>
          <div>    result = method(context, **params)</div>
          <div>  File
            "/usr/local/lib/python2.7/dist-packages/keystone-2013.1-py2.7.egg/keystone/token/controllers.py",
            line 118, in authenticate</div>
          <div>    config.CONF.signing.keyfile)</div>
          <div>  File
            "/usr/local/lib/python2.7/dist-packages/keystone-2013.1-py2.7.egg/keystone/common/cms.py",
            line 140, in cms_sign_token</div>
          <div>    output = cms_sign_text(text, signing_cert_file_name,
            signing_key_file_name)</div>
          <div>  File
            "/usr/local/lib/python2.7/dist-packages/keystone-2013.1-py2.7.egg/keystone/common/cms.py",
            line 135, in cms_sign_text</div>
          <div>    raise subprocess.CalledProcessError(retcode,
            "openssl")</div>
          <div>CalledProcessError: Command 'openssl' returned non-zero
            exit status 3</div>
          <div><br>
          </div>
          <div>Kindly help me resolve the issue</div><span class="HOEnZb"><font color="#888888">
          <div><br>
          </div>
          -- <br>
          Regards,<br>
          ----------------------------------------------<br>
          Trinath Somanchi,
          <div><a href="tel:%2B91%209866%20235%20130" value="+919866235130" target="_blank">+91 9866 235 130</a></div>
        </font></span></div><span class="HOEnZb"><font color="#888888">
      </font></span></div><span class="HOEnZb"><font color="#888888">
      <br>
      <fieldset></fieldset>
      <br>
      <pre>_______________________________________________
Mailing list: <a href="https://launchpad.net/~openstack" target="_blank">https://launchpad.net/~openstack</a>
Post to     : <a href="mailto:openstack@lists.launchpad.net" target="_blank">openstack@lists.launchpad.net</a>
Unsubscribe : <a href="https://launchpad.net/~openstack" target="_blank">https://launchpad.net/~openstack</a>
More help   : <a href="https://help.launchpad.net/ListHelp" target="_blank">https://help.launchpad.net/ListHelp</a>
</pre>
    </font></span></blockquote>
    <br>
  </div>

<br>_______________________________________________<br>
Mailing list: <a href="https://launchpad.net/~openstack" target="_blank">https://launchpad.net/~openstack</a><br>
Post to     : <a href="mailto:openstack@lists.launchpad.net">openstack@lists.launchpad.net</a><br>
Unsubscribe : <a href="https://launchpad.net/~openstack" target="_blank">https://launchpad.net/~openstack</a><br>
More help   : <a href="https://help.launchpad.net/ListHelp" target="_blank">https://help.launchpad.net/ListHelp</a><br>
<br></blockquote></div><br></div>