[openstack-dev] Looking for help getting git-review to work over https

KARR, DAVID dk068x at att.com
Fri Jun 12 16:43:19 UTC 2015 

Good idea, but that also made no difference.  In any case, I don’t think this is attempting a direct ssh connection, so I don’t see how setting up a ssh proxy would make any difference.  I tried this as “myself” and also with “sudo –E bash” with the same result:
$ pip install .
Processing /home/dk068x/work/git-review
    Complete output from command python setup.py egg_info:
    Download error on https://pypi.python.org/simple/pbr/: [Errno 1] _ssl.c:504: error:140770FC:SSL routines:SSL23_GET_SERVER_HELLO:unknown protocol -- Some packages may not be found!
    Couldn't find index page for 'pbr' (maybe misspelled?)
    Download error on https://pypi.python.org/simple/: [Errno 1] _ssl.c:504: error:140770FC:SSL routines:SSL23_GET_SERVER_HELLO:unknown protocol -- Some packages may not be found!
    No local packages or download links found for pbr
    Traceback (most recent call last):
      File "<string>", line 20, in <module>
      File "/tmp/pip-DQrJTz-build/setup.py", line 20, in <module>
        setuptools.setup(setup_requires=['pbr'], pbr=True)


From: Paul Michali [mailto:pc at michali.net]
Sent: Friday, June 12, 2015 9:31 AM
To: OpenStack Development Mailing List (not for usage questions)
Subject: Re: [openstack-dev] Looking for help getting git-review to work over https

David,
FYI, I used corkscrew with pypi as well with another .ssh/config line of:

Host pypi.python.org<http://pypi.python.org>
    ProxyCommand corkscrew <proxy-server> 80 %h %p



On Fri, Jun 12, 2015 at 11:29 AM KARR, DAVID <dk068x at att.com<mailto:dk068x at att.com>> wrote:
As I apparently have to sudo this, it would likely be more effective, if at all, to specify the proxy on the command line.  Unfortunately, it didn’t make any difference:
# pip install --proxy "https://one.proxy.att.com:8080" .
Processing /home/dk068x/work/git-review
    Complete output from command python setup.py egg_info:
    Download error on https://pypi.python.org/simple/pbr/: [Errno 1] _ssl.c:504: error:140770FC:SSL routines:SSL23_GET_SERVER_HELLO:unknown protocol -- Some packages may not be found!
    Couldn't find index page for 'pbr' (maybe misspelled?)
    Download error on https://pypi.python.org/simple/: [Errno 1] _ssl.c:504: error:140770FC:SSL routines:SSL23_GET_SERVER_HELLO:unknown protocol -- Some packages may not be found!
    No local packages or download links found for pbr
    Traceback (most recent call last):
      File "<string>", line 20, in <module>
      File "/tmp/pip-D5jhCD-build/setup.py", line 20, in <module>
        setuptools.setup(setup_requires=['pbr'], pbr=True)
      File "/usr/lib64/python2.7/distutils/core.py", line 112, in setup
        _setup_distribution = dist = klass(attrs)
...

I’m providing the appropriate https proxy url, as pip appears to be using a https url.

From: Asselin, Ramy [mailto:ramy.asselin at hp.com<mailto:ramy.asselin at hp.com>]
Sent: Thursday, June 11, 2015 4:35 PM

To: OpenStack Development Mailing List (not for usage questions)
Subject: Re: [openstack-dev] Looking for help getting git-review to work over https

Try creating/updated ~/.pip/pip.conf

With contents:

[global]
proxy = http://your_proxy:port/

From: KARR, DAVID [mailto:dk068x at att.com]
Sent: Thursday, June 11, 2015 4:16 PM
To: OpenStack Development Mailing List (not for usage questions)
Subject: Re: [openstack-dev] Looking for help getting git-review to work over https

This is just going swimmingly.
% sudo python setup.py install
Download error on https://pypi.python.org/simple/pbr/: [Errno 110] Connection timed out -- Some packages may not be found!
Couldn't find index page for 'pbr' (maybe misspelled?)
Download error on https://pypi.python.org/simple/: [Errno 110] Connection timed out -- Some packages may not be found!
No local packages or download links found for pbr

Do I have to do something special to set the proxy for this?  I have “http_proxy” and “https_proxy” already set.

From: ZZelle [mailto:zzelle at gmail.com]
Sent: Thursday, June 11, 2015 3:50 PM
To: OpenStack Development Mailing List (not for usage questions)
Subject: Re: [openstack-dev] Looking for help getting git-review to work over https

Indeed, the doc[1] is unclear
git-review can be installed using: python setup.py install or pip install .


[1]http://docs.openstack.org/infra/manual/developers.html#accessing-gerrit-over-https

On Thu, Jun 11, 2015 at 11:16 PM, KARR, DAVID <dk068x at att.com<mailto:dk068x at att.com>> wrote:
I see.  I would guess a footnote on the instructions about this would be useful. Is https://github.com/openstack-infra/git-review the proper location to get the buildable source?  I don’t see any obvious build instructions there.

From: ZZelle [mailto:zzelle at gmail.com<mailto:zzelle at gmail.com>]
Sent: Thursday, June 11, 2015 2:01 PM

To: OpenStack Development Mailing List (not for usage questions)
Subject: Re: [openstack-dev] Looking for help getting git-review to work over https

Hi David,


Following git config options are supported by git-review (https://review.openstack.org/116035)
   git config --global gitreview.scheme https
   git config --global gitreview.port 443
BUT the feature was merged after 1.24 (it's highlighted by your git review -vs)
so the feature is currently only available on the git-review master branch (which
is quite stable, i use it every day).


Cedric/ZZelle at irc


On Thu, Jun 11, 2015 at 10:14 PM, KARR, DAVID <dk068x at att.com<mailto:dk068x at att.com>> wrote:
I followed the instructions for installing and configuring corkscrew, similar to what you provided here.  The result seems to indicate it did something, but the overall result is the same:
2015-06-11 13:07:25.866568 Running: git log --color=never --oneline HEAD^1..HEAD
2015-06-11 13:07:25.869309 Running: git remote
2015-06-11 13:07:25.872742 Running: git config --get gitreview.username
No remote set, testing ssh://dk068x@review.openstack.org:29418/openstack/horizon.git<http://dk068x@review.openstack.org:29418/openstack/horizon.git>
2015-06-11 13:07:25.874869 Running: git push --dry-run ssh://dk068x@review.openstack.org:29418/openstack/horizon.git<http://dk068x@review.openstack.org:29418/openstack/horizon.git> --all
The authenticity of host '[review.openstack.org<http://review.openstack.org>]:29418 (<no hostip for proxy command>)' can't be established.
RSA key fingerprint is 28:c6:42:b7:44:d2:48:64:c1:3f:31:d8:1b:6e:3b:63.
Are you sure you want to continue connecting (yes/no)? yes
ssh://dk068x@review.openstack.org:29418/openstack/horizon.git<http://dk068x@review.openstack.org:29418/openstack/horizon.git> did not work.
Could not connect to gerrit.
Enter your gerrit username:
---------------------------

From: Paul Michali [mailto:pc at michali.net<mailto:pc at michali.net>]
Sent: Thursday, June 11, 2015 11:09 AM

To: OpenStack Development Mailing List (not for usage questions)
Subject: Re: [openstack-dev] Looking for help getting git-review to work over https

Do you know if you have SSH access to the outside world through the firewall?

Did you setup a proxy? I setup 'corkscrew' under Ubuntu. After installing, created a .ssh/config file with:

Host review.openstack.org<http://review.openstack.org>
    ProxyCommand corkscrew <proxy-host> 80 %h %p

The proxy host is one that allows HTTP/HTTPS to outside world and corkscrew tunnels the SSH through to port 80.

HTHs,

PCM

On Thu, Jun 11, 2015 at 12:44 PM KARR, DAVID <dk068x at att.com<mailto:dk068x at att.com>> wrote:
Thanks for replying.

% git review -vs
2015-06-11 09:30:38.396076 Running: git log --color=never --oneline HEAD^1..HEAD
2015-06-11 09:30:38.399021 Running: git remote
2015-06-11 09:30:38.401033 Running: git config --get gitreview.username
No remote set, testing ssh://dk068x@review.openstack.org:29418/openstack/horizon.git<http://dk068x@review.openstack.org:29418/openstack/horizon.git>
2015-06-11 09:30:38.402988 Running: git push --dry-run ssh://dk068x@review.openstack.org:29418/openstack/horizon.git<http://dk068x@review.openstack.org:29418/openstack/horizon.git> --all
ssh://dk068x@review.openstack.org:29418/openstack/horizon.git<http://dk068x@review.openstack.org:29418/openstack/horizon.git> did not work.
Could not connect to gerrit.
Enter your gerrit username:

This output is interesting, because I followed the instructions to set the scheme and port to https and 443, which can be seen from:
% git config --global -l
user.name<http://user.name>=David Karr
user.email=dk068x at att.com<mailto:dk068x at att.com>
gitreview.scheme=https
gitreview.port=443

Concerning the question ‘Do you have "gerrit" remote already configured?’, I guess I’d have to say I don’t know. I’ve followed instructions for setting up my pub key, but I’m not sure exactly what is entailed in “gerrit remote”.

I can get to https://review.openstack.org/ from my browser and from the command line with curl.

The “ls-remote” command returns without error (or any other output).

From: Yuriy Taraday [mailto:yorik.sar at gmail.com<mailto:yorik.sar at gmail.com>]
Sent: Thursday, June 11, 2015 9:19 AM
To: OpenStack Development Mailing List (not for usage questions)
Subject: Re: [openstack-dev] Looking for help getting git-review to work over https


On Thu, Jun 11, 2015, 18:09 KARR, DAVID <dk068x at att.com<mailto:dk068x at att.com>> wrote:

I could use some help with setting up git-review in a slightly unfriendly firewall situation.

I'm trying to set up git-review on my CentOS7 VM, and our firewall blocks the non-standard ssh port.  I'm following the instructions at http://docs.openstack.org/infra/manual/developers.html#accessing-gerrit-over-https , for configuring git-review to use https on port 443, but this still isn't working (times out with "Could not connect to gerrit").  I've confirmed that I can reach other external sites on port 443.

Can someone give me a hand with this?





Hello.



- Can you please post all output from "git review -vs"?

- Do you have "gerrit" remote already configured?

- Do you have access to https://review.openstack.org/ from your browser?

- Can you access it from command line (via "curl -I https://review.openstack.org/" for example)?

- Does "git ls-remote https://review.openstack.org/openstack/nova > /dev/null" produce and error?
__________________________________________________________________________
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: OpenStack-dev-request at lists.openstack.org?subject:unsubscribe<http://OpenStack-dev-request@lists.openstack.org?subject:unsubscribe>
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev

__________________________________________________________________________
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: OpenStack-dev-request at lists.openstack.org?subject:unsubscribe<http://OpenStack-dev-request@lists.openstack.org?subject:unsubscribe>
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev


__________________________________________________________________________
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: OpenStack-dev-request at lists.openstack.org?subject:unsubscribe<http://OpenStack-dev-request@lists.openstack.org?subject:unsubscribe>
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev

__________________________________________________________________________
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: OpenStack-dev-request at lists.openstack.org?subject:unsubscribe<http://OpenStack-dev-request@lists.openstack.org?subject:unsubscribe>
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openstack.org/pipermail/openstack-dev/attachments/20150612/866a2e4c/attachment.html>

More information about the OpenStack-dev mailing list