<div dir="ltr"><div>Hi, All:<br></div> I've deployed an undercloud baremetal with tripleO devtest. But when I was trying to add endpoints to keystone and use other services like nova and glance, it always has<font> </font><span style="font-weight:normal"><font>certificat</font></span><span style="font-weight:normal"><font>e error.<b> I can not use any service except keystone in undercloud machine when I source undercloudrc.</b> Please help me .<br>
</font></span><div><div> It always has “<span style="color:rgb(255,0,0)"><b><span style="font-family:Menlo;font-size:11px">Verify error: Command 'openssl' returned non-zero exit status 4</span></b></span>”. <br>
<div> I save the token in one file, and run "<font face="Menlo"><span style="color:rgb(255,0,0)"><b>sudo openssl cms -verify -certfile /tmp/keystone-signing-R8K0yX/</b></span><span style="color:rgb(255,0,0)"><b>signing_cert.pem -CAfile /tmp/keystone-signing-R8K0yX/</b></span><span style="color:rgb(255,0,0)"><b>cacert.pem -inform PEM -nosmimecap -nodetach -nocerts -noattr -in token.txt</b></span>”,
it reports error “</font><span style="color:rgb(255,0,0)"><b><span style="font-family:Menlo;font-size:11px">Verification failure</span></b></span></div><span style="color:rgb(255,0,0)"><b>
</b></span><div><span style="color:rgb(255,0,0)"><b><span style="font-family:Menlo;font-size:11px">3074320060:error:2E099064:CMS routines:CMS_SIGNERINFO_VERIFY_CERT:certificate verify error:cms_smime.c:304:Verify error:certificate is not yet valid</span></b></span><font face="Menlo">"</font></div>
<div style="color:rgb(0,0,0);font-family:Calibri,sans-serif;font-size:14px">
<br>
</div>
<div style="color:rgb(0,0,0);font-family:Calibri,sans-serif;font-size:14px">
Below are error logs:</div>
<div style="color:rgb(0,0,0);font-family:Calibri,sans-serif;font-size:14px">
<br>
</div>
<div style="color:rgb(0,0,0);font-family:Calibri,sans-serif;font-size:14px">
<p style="margin:0px;font-size:11px;font-family:Menlo">2010-08-28
04:04:25.738 16927 DEBUG keystonemiddleware.auth_token [-] Server
reports support for api versions: v3.0, v2.0 _get_supported_versions
/opt/stack/venvs/openstack/local/lib/python2.7/site-packages/keystonemiddleware/auth_token.py:1253</p>
<p style="margin:0px;font-size:11px;font-family:Menlo">2010-08-28 04:04:25.738 16927 INFO keystonemiddleware.auth_token [-] Auth Token confirmed use of v3.0 apis</p>
<p style="margin:0px;font-size:11px;font-family:Menlo">2010-08-28 04:04:25.748 16927 DEBUG keystonemiddleware.auth_token [-] data(-----BEGIN CMS-----</p>
<p style="margin:0px;font-size:11px;font-family:Menlo">MIIBygYJKoZIhvcNAQcCoIIBuzCCAbcCAQExDTALBglghkgBZQMEAgEwHgYJKoZI</p>
<p style="margin:0px;font-size:11px;font-family:Menlo">hvcNAQcBoBEED3sicmV2b2tlZCI6IFtdfTGCAYEwggF9AgEBMFgwUzELMAkGA1UE</p>
<p style="margin:0px;font-size:11px;font-family:Menlo">BhMCWFgxDjAMBgNVBAgTBVVuc2V0MQ4wDAYDVQQHEwVVbnNldDEOMAwGA1UEChMF</p>
<p style="margin:0px;font-size:11px;font-family:Menlo">VW5zZXQxFDASBgNVBAMTC0tleXN0b25lIENBAgECMAsGCWCGSAFlAwQCATANBgkq</p>
<p style="margin:0px;font-size:11px;font-family:Menlo">hkiG9w0BAQEFAASCAQB2lxoXMw1l8DBRUxxD9iLep85XrJMnHspEE94GEUnZkaH1</p>
<p style="margin:0px;font-size:11px;font-family:Menlo">FkGWUqdCVSXcsvVcuWcQKb9ZjMwGnBeTYNeqc66Fezy4Sg2HSbXjne7uk4giGIe+</p>
<p style="margin:0px;font-size:11px;font-family:Menlo">7fOeGVl25q05zjUmwrUzZRKv4vpLaQxZctxSGSRXNrDdmRcrC02YFVm6/Mghpvtx</p>
<p style="margin:0px;font-size:11px;font-family:Menlo">4SjWk5EWrq+/ZxQ2sFxjYVSREF6YjpPf+PcS6Hh9ieBpUH2GGm+kr4/KdIyyrHlm</p>
<p style="margin:0px;font-size:11px;font-family:Menlo">SRItYmsxE3fF1n2N23bQQULkdNotRzj8fIYJLEno7XWqvMxqQKUTyQBTlfVTfpo5</p>
<p style="margin:0px;font-size:11px;font-family:Menlo">kumS9+5On4Gx2vc2ZLQEjQT0lEOxyaV4ze3+3Fc2</p>
<p style="margin:0px;font-size:11px;font-family:Menlo">-----END CMS-----</p>
<p style="margin:0px;font-size:11px;font-family:Menlo">) verify /opt/stack/venvs/openstack/local/lib/python2.7/site-packages/keystonemiddleware/auth_token.py:867</p>
<p style="margin:0px;font-size:11px;font-family:Menlo">2010-08-28 04:04:25.749 16927 DEBUG keystonemiddleware.auth_token [-] _signing_cert_file_name(/tmp/keystone-signing-TASGp3/signing_cert.pem) verify /opt/stack/venvs/openstack/local/lib/python2.7/site-packages/keystonemiddleware/auth_token.py:868</p>
<p style="margin:0px;font-size:11px;font-family:Menlo">2010-08-28 04:04:25.749 16927 DEBUG keystonemiddleware.auth_token [-] _signing_ca_file_name(/tmp/keystone-signing-TASGp3/cacert.pem) verify /opt/stack/venvs/openstack/local/lib/python2.7/site-packages/keystonemiddleware/auth_token.py:869</p>
<p style="margin:0px;font-size:11px;font-family:Menlo">2010-08-28
04:04:25.755 16927 WARNING keystonemiddleware.auth_token [-] Verify
error: Command 'openssl' returned non-zero exit status 4</p>
<p style="margin:0px;font-size:11px;font-family:Menlo">2010-08-28
04:04:25.755 16927 DEBUG keystonemiddleware.auth_token [-] Token
validation failure. _validate_user_token /opt/stack/venvs/openstack/local/lib/python2.7/site-packages/keystonemiddleware/auth_token.py:687</p>
<p style="margin:0px;font-size:11px;font-family:Menlo">2010-08-28 04:04:25.755 16927 TRACE keystonemiddleware.auth_token Traceback (most recent call last):</p>
<p style="margin:0px;font-size:11px;font-family:Menlo">2010-08-28 04:04:25.755 16927 TRACE keystonemiddleware.auth_token File "/opt/stack/venvs/openstack/local/lib/python2.7/site-packages/keystonemiddleware/auth_token.py", line 671, in _validate_user_token</p>
<p style="margin:0px;font-size:11px;font-family:Menlo">2010-08-28 04:04:25.755 16927 TRACE keystonemiddleware.auth_token verified = self._verify_pkiz_token(user_token, token_ids)</p>
<p style="margin:0px;font-size:11px;font-family:Menlo">2010-08-28 04:04:25.755 16927 TRACE keystonemiddleware.auth_token File "/opt/stack/venvs/openstack/local/lib/python2.7/site-packages/keystonemiddleware/auth_token.py", line 905, in _verify_pkiz_token</p>
<p style="margin:0px;font-size:11px;font-family:Menlo">2010-08-28 04:04:25.755 16927 TRACE keystonemiddleware.auth_token if self._is_signed_token_revoked(token_ids):</p>
<p style="margin:0px;font-size:11px;font-family:Menlo">2010-08-28 04:04:25.755 16927 TRACE keystonemiddleware.auth_token File "/opt/stack/venvs/openstack/local/lib/python2.7/site-packages/keystonemiddleware/auth_token.py", line 845, in _is_signed_token_revoked</p>
<p style="margin:0px;font-size:11px;font-family:Menlo">2010-08-28 04:04:25.755 16927 TRACE keystonemiddleware.auth_token if self._is_token_id_in_revoked_list(token_id):</p>
<p style="margin:0px;font-size:11px;font-family:Menlo">2010-08-28 04:04:25.755 16927 TRACE keystonemiddleware.auth_token File "/opt/stack/venvs/openstack/local/lib/python2.7/site-packages/keystonemiddleware/auth_token.py", line 852, in _is_token_id_in_revoked_list</p>
<p style="margin:0px;font-size:11px;font-family:Menlo">2010-08-28 04:04:25.755 16927 TRACE keystonemiddleware.auth_token revocation_list = self._token_revocation_list</p>
<p style="margin:0px;font-size:11px;font-family:Menlo">2010-08-28 04:04:25.755 16927 TRACE keystonemiddleware.auth_token File "/opt/stack/venvs/openstack/local/lib/python2.7/site-packages/keystonemiddleware/auth_token.py", line 963, in _token_revocation_list</p>
<p style="margin:0px;font-size:11px;font-family:Menlo">2010-08-28
04:04:25.755 16927 TRACE keystonemiddleware.auth_token
self._token_revocation_list = self._fetch_revocation_list()</p>
<p style="margin:0px;font-size:11px;font-family:Menlo">2010-08-28 04:04:25.755 16927 TRACE keystonemiddleware.auth_token File "/opt/stack/venvs/openstack/local/lib/python2.7/site-packages/keystonemiddleware/auth_token.py", line 997, in _fetch_revocation_list</p>
<p style="margin:0px;font-size:11px;font-family:Menlo">2010-08-28 04:04:25.755 16927 TRACE keystonemiddleware.auth_token return self._cms_verify(revocation_list_data)</p>
<p style="margin:0px;font-size:11px;font-family:Menlo">2010-08-28 04:04:25.755 16927 TRACE keystonemiddleware.auth_token File "/opt/stack/venvs/openstack/local/lib/python2.7/site-packages/keystonemiddleware/auth_token.py", line 888, in _cms_verify</p>
<p style="margin:0px;font-size:11px;font-family:Menlo">2010-08-28 04:04:25.755 16927 TRACE keystonemiddleware.auth_token return verify()</p>
<p style="margin:0px;font-size:11px;font-family:Menlo">2010-08-28 04:04:25.755 16927 TRACE keystonemiddleware.auth_token File "/opt/stack/venvs/openstack/local/lib/python2.7/site-packages/keystonemiddleware/auth_token.py", line 874, in verify</p>
<p style="margin:0px;font-size:11px;font-family:Menlo">2010-08-28 04:04:25.755 16927 TRACE keystonemiddleware.auth_token inform=inform).decode('utf-8')</p>
<p style="margin:0px;font-size:11px;font-family:Menlo">2010-08-28 04:04:25.755 16927 TRACE keystonemiddleware.auth_token File "/opt/stack/venvs/openstack/local/lib/python2.7/site-packages/keystoneclient/common/cms.py", line 178, in cms_verify</p>
<p style="margin:0px;font-size:11px;font-family:Menlo">2010-08-28 04:04:25.755 16927 TRACE keystonemiddleware.auth_token raise e</p>
<p style="margin:0px;font-size:11px;font-family:Menlo">2010-08-28
04:04:25.755 16927 TRACE keystonemiddleware.auth_token
CalledProcessError: Command 'openssl' returned non-zero exit status 4</p>
<p style="margin:0px;font-size:11px;font-family:Menlo">2010-08-28 04:04:25.755 16927 TRACE keystonemiddleware.auth_token </p>
<p style="margin:0px;font-size:11px;font-family:Menlo">2010-08-28
04:04:25.757 16927 DEBUG keystonemiddleware.auth_token [-] Marking token
as unauthorized in cache store_invalid /opt/stack/venvs/openstack/local/lib/python2.7/site-packages/keystonemiddleware/auth_token.py:1501</p>
<p style="margin:0px;font-size:11px;font-family:Menlo">2010-08-28 04:04:25.757 16927 WARNING keystonemiddleware.auth_token [-] Authorization failed for token</p>
<p style="margin:0px;font-size:11px;font-family:Menlo">2010-08-28 04:04:25.757 16927 INFO keystonemiddleware.auth_token [-] Invalid user token - deferring reject downstream</p>
</div><div><div dir="ltr"><div><font face="comic sans ms, sans-serif" size="4"><b><i>Best Regards！</i></b></font></div><font face="comic sans ms, sans-serif" size="4"><b><i>Chao Yan<br><font>--------------<br></font></i></b></font><font face="comic sans ms, sans-serif" size="4"><b><i><font>My twitter：Andy Yan <a href="https://twitter.com/yanchao727" target="_blank">@yanchao727</a></font></i></b></font><br>
<font face="comic sans ms, sans-serif" size="4"><b><i><font>My Weibo：<a href="http://weibo.com/herewearenow" target="_blank">http://weibo.com/herewearenow</a><br>--------------</font><br></i></b></font></div></div>
</div></div></div>