<div dir="ltr">Hi,<br><div><div class="gmail_extra"><br><div class="gmail_quote"><br><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><span class="">
root@ppm-c240-ceph3:~# /usr/bin/radosgw -n client.radosgw.gateway -d<br>
log-to-stderr<br>
2014-12-09 12:51:31.410944 7f073f6457c0 0 ceph version 0.80.7<br>
(<u></u>6c0127fcb58008793d3c8b62d925bc<u></u>91963672a3), process radosgw, pid 5958<br>
common/ceph_crypto.cc: In function 'void<br>
ceph::crypto::init(<u></u>CephContext*)' thread 7f073f6457c0 time 2014-12-09<br>
12:51:31.412682<br>
common/ceph_crypto.cc: 54: FAILED assert(s == SECSuccess)<br>
ceph version 0.80.7 (<u></u>6c0127fcb58008793d3c8b62d925bc<u></u>91963672a3)<br>
1: (()+0x293ce8) [0x7f073e797ce8]<br>
2: (common_init_finish(<u></u>CephContext*, int)+0x10) [0x7f073e76afa0]<br>
3: (main()+0x340) [0x4665a0]<br>
4: (__libc_start_main()+0xf5) [0x7f073c932ec5]<br>
5: /usr/bin/radosgw() [0x4695c7]<br>
NOTE: a copy of the executable, or `objdump -rdS <executable>` is<br>
needed to interpret this.<br>
2014-12-09 12:51:31.413544 7f073f6457c0 -1 common/ceph_crypto.cc: In<br>
function 'void ceph::crypto::init(<u></u>CephContext*)' thread 7f073f6457c0<br>
time 2014-12-09 12:51:31.412682<br>
common/ceph_crypto.cc: 54: FAILED assert(s == SECSuccess)<br>
<br>
</span></blockquote>
<br></blockquote><div> </div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">
This looks like it could be failing to talk to Keystone via SSL - have you setup Keystone to use SSL? If so you'll need the converted certs copied to /var/lib/nssdb on your Radosgw host (see bottom of <a href="http://ceph.com/docs/master/radosgw/keystone/" target="_blank">http://ceph.com/docs/master/<u></u>radosgw/keystone/</a>). If you have already done this...then apologies, but it's worth double checking!<br>
<br>
Cheers<span class=""><font color="#888888"><br>
<br>
Mark<br>
<br>
<br>
</font></span></blockquote></div><br></div><div class="gmail_extra">I have followed these steps on my Juno node from the URL <a href="http://ceph.com/docs/master/radosgw/keystone/">http://ceph.com/docs/master/radosgw/keystone/</a></div><div class="gmail_extra"><pre>mkdir /var/ceph/nss
openssl x509 -in /etc/keystone/ssl/certs/ca.pem -pubkey | \
certutil -d /var/ceph/nss -A -n ca -t "TCu,Cu,Tuw"<br><br>openssl x509 -in /etc/keystone/ssl/certs/signing_cert.pem -pubkey | \
certutil -A -d /var/ceph/nss -n signing_cert -t "P,P,P"</pre><br></div><div class="gmail_extra">Do you suggest that I manually copy the self signed certificates (Generated on Dec 4, 2014) from /var/ceph/nss on the Juno node to /var/lib/nssdb on the rados gw host ?<br><br></div><div class="gmail_extra">btw, I can already see the following files (dated Sep24 2014) in my /var/lib/nssdb on the radosgw host. <br><br>root@ppm-c240-ceph3:/var/lib/nssdb# ls -la<br>total 52<br>drwxr-xr-x 2 root root 4096 Oct 29 03:17 .<br>drwxr-xr-x 44 root root 4096 Nov 6 05:06 ..<br>-rw-r--r-- 1 root root 9216 Sep 24 08:25 cert9.db<br>-rw-r--r-- 1 root root 11264 Sep 24 08:25 key4.db<br>-rw-r--r-- 1 root root 449 Sep 24 08:25 pkcs11.txt<br>-rw-r--r-- 1 root root 16384 Sep 24 08:25 secmod.db<br>root@ppm-c240-ceph3:/var/lib/nssdb#<br><br></div><div class="gmail_extra">Do I need to overwrite the existing .db files and .txt file in /var/lib/nssdb on the radosgw host with the ones copied from /var/ceph/nss on the Juno node ?<br></div><div class="gmail_extra"><br></div><div class="gmail_extra">Regards,<br></div><div class="gmail_extra">-- <br><div class="gmail_signature">Vivek Varghese Cherian<br></div>
</div></div></div>