Hi, I disabled TLS in globals.yml then tried to deploy openstack, but it does not work, the deployment still uses https. How can I make a workaround? Le mar. 11 oct. 2022 à 12:08, wodel youchi <wodel.youchi@gmail.com> a écrit :

Anyone???

Le lun. 10 oct. 2022 à 12:21, wodel youchi <wodel.youchi@gmail.com> a écrit :

...

Hi,

I tried to deploy a new certificate using :kolla-ansible reconfigure But I got :

"module_stderr": "*Failed to discover available identity versions when contacting https://dashint.cloud.exemple.com:35357 <https://dashint.cloud.exemple.com:35357>*. Attemptin g to parse version from URL.\nTraceback (most recent call last):\n File \"/opt/ansible/lib/python3.6/site-packages/urllib3/connectio npool.py\", line 706, in urlopen\n chunked=chunked,\n File \"/opt/ansible/lib/python3.6/site-packages/urllib3/connectionpool.py\" , line 382, in _make_request\n self._validate_conn(conn)\n File \"/opt/ansible/lib/python3.6/site-packages/urllib3/connectionpool .py\", line 1010, in _validate_conn\n conn.connect()\n File \"/opt/ansible/lib/python3.6/site-packages/urllib3/connection.py\", l ine 421, in connect\n tls_in_tls=tls_in_tls,\n File \"/opt/ansible/lib/python3.6/site-packages/urllib3/util/ssl_.py\", line 450, in ssl_wrap_socket\n sock, context, tls_in_tls, server_hostname=server_hostname\n File \"/opt/ansible/lib/python3.6/site-packages /urllib3/util/ssl_.py\", line 493, in _ssl_wrap_socket_impl\n return ssl_context.wrap_socket(sock, server_hostname=server_hostname )\n File \"/usr/lib64/python3.6/ssl.py\", line 365, in wrap_socket\n _context=self, _session=session)\n File \"/usr/lib64/python 3.6/ssl.py\", line 776, in __init__\n self.do_handshake()\n File \"/usr/lib64/python3.6/ssl.py\", line 1036, in do_handshake\n self._sslobj.do_handshake()\n File \"/usr/lib64/python3.6/ssl.py\", line 648, in do_handshake\n self._sslobj.do_handshake()\nssl .*SSLError: [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed*

Some help please

Regards.

Le dim. 9 oct. 2022 à 16:19, wodel youchi <wodel.youchi@gmail.com> a écrit :

...

Hi,

My SSL certificate has expired, and now I cannot authenticate into horizon and I have these errors : *WARNING keystoneauth.identity.generic.base [-] Failed to discover available identity versions when contacting https://dashint.cloud.exemple.com:35357 <https://dashint.cloud.exemple.com:35357>. Attempting to parse version from URL.: keystoneauth1.exceptions.connection.SSLError: SSL exception connecting to https:// dashint.cloud.exemple.com <http://dashint.cloud.exemple.com> :35357: HTTPSConnectionPool(host=' dashint.cloud.exemple.com <http://dashint.cloud.exemple.com>', port=35357): Max retries exceeded with url: / (Caused by SSLError(SSLError(1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:897)'),))*

In my globals.yml I have this parameter : kolla_verify_tls_backend: "no"

1 - How do I disable SSL verification for now? 2 - How to install a new SSL certificate?

Regards.