[openstack-dev] Looking for help getting git-review to work over https

KARR, DAVID dk068x at att.com
Fri Jun 12 17:08:25 UTC 2015


> -----Original Message-----
> From: Ian Cordasco [mailto:ian.cordasco at RACKSPACE.COM]
> Sent: Friday, June 12, 2015 9:57 AM
> To: OpenStack Development Mailing List (not for usage questions)
> Subject: Re: [openstack-dev] Looking for help getting git-review to
> work over https
> 
> Python has generally awful support for doing HTTPS over an HTTPS
> proxy.
> Can you try doing:
> 
> # pip install --proxy http://one.proxy.att.com:<appropriate-port>

Thanks.  I already tried that. It's not even clear this is failing to connect. I don't know what this is telling me.
----------------------
# pip install --proxy http://one.proxy.att.com:8080 .
Processing /home/dk068x/work/git-review
    Complete output from command python setup.py egg_info:
    Download error on https://pypi.python.org/simple/pbr/: [Errno 1] _ssl.c:504: error:140770FC:SSL routines:SSL23_GET_SERVER_HELLO:unknown protocol -- Some packages may not be found!
    Couldn't find index page for 'pbr' (maybe misspelled?)
    Download error on https://pypi.python.org/simple/: [Errno 1] _ssl.c:504: error:140770FC:SSL routines:SSL23_GET_SERVER_HELLO:unknown protocol -- Some packages may not be found!
    No local packages or download links found for pbr
    Traceback (most recent call last):
      File "<string>", line 20, in <module>
      File "/tmp/pip-MStPEo-build/setup.py", line 20, in <module>
        setuptools.setup(setup_requires=['pbr'], pbr=True)
-----------------

> 
> Cheers,
> Ian
> 
> On 6/12/15, 10:26, "KARR, DAVID" <dk068x at att.com> wrote:
> 
> >As I apparently have to sudo this, it would likely be more
> effective, if
> >at all, to specify the proxy on the command line.  Unfortunately,
> > it didn’t make any difference:
> >
> ># pip install --proxy "https://one.proxy.att.com:8080" .
> >Processing /home/dk068x/work/git-review
> >    Complete output from command python setup.py egg_info:
> >    Download error on https://pypi.python.org/simple/pbr/: [Errno
> 1]
> >_ssl.c:504: error:140770FC:SSL
> routines:SSL23_GET_SERVER_HELLO:unknown
> >protocol -- Some packages may
> > not be found!
> >    Couldn't find index page for 'pbr' (maybe misspelled?)
> >    Download error on https://pypi.python.org/simple/: [Errno 1]
> >_ssl.c:504: error:140770FC:SSL
> routines:SSL23_GET_SERVER_HELLO:unknown
> >protocol -- Some packages may not
> > be found!
> >    No local packages or download links found for pbr
> >    Traceback (most recent call last):
> >      File "<string>", line 20, in <module>
> >      File "/tmp/pip-D5jhCD-build/setup.py", line 20, in <module>
> >        setuptools.setup(setup_requires=['pbr'], pbr=True)
> >      File "/usr/lib64/python2.7/distutils/core.py", line 112, in
> setup
> >        _setup_distribution = dist = klass(attrs)
> >...
> >
> >
> >I’m providing the appropriate https proxy url, as pip appears to
> be using
> >a https url.
> >
> >From: Asselin, Ramy [mailto:ramy.asselin at hp.com]
> >
> >Sent: Thursday, June 11, 2015 4:35 PM
> >To: OpenStack Development Mailing List (not for usage questions)
> >Subject: Re: [openstack-dev] Looking for help getting git-review
> to work
> >over https
> >
> >
> >
> >Try creating/updated ~/.pip/pip.conf
> >
> >With contents:
> >
> >[global]
> >proxy =
> >http://your_proxy:port/
> >
> >From: KARR, DAVID [mailto:dk068x at att.com]
> >
> >Sent: Thursday, June 11, 2015 4:16 PM
> >To: OpenStack Development Mailing List (not for usage questions)
> >Subject: Re: [openstack-dev] Looking for help getting git-review
> to work
> >over https
> >
> >
> >
> >This is just going swimmingly.
> >
> >% sudo python setup.py install
> >Download error on
> >https://pypi.python.org/simple/pbr/: [Errno 110] Connection timed
> out --
> >Some packages may not be found!
> >Couldn't find index page for 'pbr' (maybe misspelled?)
> >Download error on
> >https://pypi.python.org/simple/: [Errno 110] Connection timed out
> -- Some
> >packages may not be found!
> >No local packages or download links found for pbr
> >
> >
> >Do I have to do something special to set the proxy for this?  I
> have
> >“http_proxy” and “https_proxy” already set.
> >
> >From: ZZelle [mailto:zzelle at gmail.com]
> >
> >Sent: Thursday, June 11, 2015 3:50 PM
> >To: OpenStack Development Mailing List (not for usage questions)
> >Subject: Re: [openstack-dev] Looking for help getting git-review
> to work
> >over https
> >
> >
> >
> >Indeed, the doc[1] is unclear
> >
> >git-review can be installed using: python setup.py install or pip
> install
> >.
> >
> >
> >[1]http://docs.openstack.org/infra/manual/developers.html#accessin
> g-gerrit
> >-over-https
> >
> >
> >
> >On Thu, Jun 11, 2015 at 11:16 PM, KARR, DAVID <dk068x at att.com>
> wrote:
> >
> >I see.  I would guess a footnote on the instructions about this
> would be
> >useful. Is
> >https://github.com/openstack-infra/git-review the proper location
> to get
> >the buildable source?  I don’t see any obvious build instructions
> there.
> >
> >From: ZZelle [mailto:zzelle at gmail.com]
> >
> >Sent: Thursday, June 11, 2015 2:01 PM
> >
> >To: OpenStack Development Mailing List (not for usage questions)
> >Subject: Re: [openstack-dev] Looking for help getting git-review
> to work
> >over https
> >
> >
> >
> >
> >
> >Hi David,
> >
> >
> >Following git config options are supported by git-review
> >(https://review.openstack.org/116035)
> >
> >   git config --global gitreview.scheme https
> >   git config --global gitreview.port 443
> >
> >BUT the feature was merged after 1.24 (it's highlighted by your
> git
> >review -vs)
> >
> >so the feature is currently only available on the git-review
> master
> >branch (which
> >
> >is quite stable, i use it every day).
> >
> >
> >
> >
> >
> >Cedric/ZZelle at irc
> >
> >
> >
> >
> >On Thu, Jun 11, 2015 at 10:14 PM, KARR, DAVID <dk068x at att.com>
> wrote:
> >
> >I followed the instructions for installing and configuring
> corkscrew,
> >similar to what you provided here.  The
> > result seems to indicate it did something, but the overall result
> is the
> >same:
> >
> >2015-06-11 13:07:25.866568 Running: git log --color=never --
> oneline
> >HEAD^1..HEAD
> >2015-06-11 13:07:25.869309 Running: git remote
> >2015-06-11 13:07:25.872742 Running: git config --get
> gitreview.username
> >No remote set, testing
> >ssh://dk068x@review.openstack.org:29418/openstack/horizon.git
> ><http://dk068x@review.openstack.org:29418/openstack/horizon.git>
> >2015-06-11 13:07:25.874869 Running: git push --dry-run
> >ssh://dk068x@review.openstack.org:29418/openstack/horizon.git
> ><http://dk068x@review.openstack.org:29418/openstack/horizon.git>
> > --all
> >The authenticity of host '[review.openstack.org
> ><http://review.openstack.org>]:29418
> > (<no hostip for proxy command>)' can't be established.
> >RSA key fingerprint is
> 28:c6:42:b7:44:d2:48:64:c1:3f:31:d8:1b:6e:3b:63.
> >Are you sure you want to continue connecting (yes/no)? yes
> >ssh://dk068x@review.openstack.org:29418/openstack/horizon.git
> ><http://dk068x@review.openstack.org:29418/openstack/horizon.git>
> > did not work.
> >Could not connect to gerrit.
> >Enter your gerrit username:
> >---------------------------
> >
> >From: Paul Michali [mailto:pc at michali.net]
> >
> >Sent: Thursday, June 11, 2015 11:09 AM
> >
> >To: OpenStack Development Mailing List (not for usage questions)
> >Subject: Re: [openstack-dev] Looking for help getting git-review
> to work
> >over https
> >
> >
> >
> >
> >
> >Do you know if you have SSH access to the outside world through
> the
> >firewall?
> >
> >
> >Did you setup a proxy? I setup 'corkscrew' under Ubuntu. After
> >installing, created a .ssh/config file with:
> >
> >
> >
> >Host
> >review.openstack.org <http://review.openstack.org>
> >
> >    ProxyCommand corkscrew <proxy-host> 80 %h %p
> >
> >
> >
> >The proxy host is one that allows HTTP/HTTPS to outside world and
> >corkscrew tunnels the SSH through to port 80.
> >
> >
> >
> >HTHs,
> >
> >
> >
> >PCM
> >
> >
> >On Thu, Jun 11, 2015 at 12:44 PM KARR, DAVID <dk068x at att.com>
> wrote:
> >
> >
> >Thanks for replying.
> >
> >
> >% git review -vs
> >2015-06-11 09:30:38.396076 Running: git log --color=never --
> oneline
> >HEAD^1..HEAD
> >2015-06-11 09:30:38.399021 Running: git remote
> >2015-06-11 09:30:38.401033 Running: git config --get
> gitreview.username
> >No remote set, testing
> >ssh://dk068x@review.openstack.org:29418/openstack/horizon.git
> ><http://dk068x@review.openstack.org:29418/openstack/horizon.git>
> >2015-06-11 09:30:38.402988 Running: git push --dry-run
> >ssh://dk068x@review.openstack.org:29418/openstack/horizon.git
> ><http://dk068x@review.openstack.org:29418/openstack/horizon.git>
> > --all
> >ssh://dk068x@review.openstack.org:29418/openstack/horizon.git
> ><http://dk068x@review.openstack.org:29418/openstack/horizon.git>
> > did not work.
> >Could not connect to gerrit.
> >Enter your gerrit username:
> >
> >
> >This output is interesting, because I followed the instructions to
> set
> >the scheme and port to https and 443,
> > which can be seen from:
> >
> >% git config --global -l
> >user.name <http://user.name>=David Karr
> >user.email=dk068x at att.com
> >gitreview.scheme=https
> >gitreview.port=443
> >
> >
> >Concerning the question ‘Do you have "gerrit" remote already
> >configured?’, I guess I’d have to say I don’t know.
> > I’ve followed instructions for setting up my pub key, but I’m not
> sure
> >exactly what is entailed in “gerrit remote”.
> >
> >I can get to
> >https://review.openstack.org/ from my browser and from the command
> line
> >with curl.
> >
> >The “ls-remote” command returns without error (or any other
> output).
> >
> >From: Yuriy Taraday [mailto:yorik.sar at gmail.com]
> >
> >Sent: Thursday, June 11, 2015 9:19 AM
> >To: OpenStack Development Mailing List (not for usage questions)
> >Subject: Re: [openstack-dev] Looking for help getting git-review
> to work
> >over https
> >
> >
> >
> >
> >
> >
> >On Thu, Jun 11, 2015, 18:09 KARR, DAVID <dk068x at att.com> wrote:
> >
> >I could use some help with setting up git-review in a slightly
> unfriendly
> >firewall situation.
> >I'm trying to set up git-review on my CentOS7 VM, and our firewall
> blocks
> >the non-standard ssh port.  I'm following the instructions at
> >
> >http://docs.openstack.org/infra/manual/developers.html#accessing-
> gerrit-ov
> >er-https
> ><http://docs.openstack.org/infra/manual/developers.html#accessing-
> gerrit-o
> >ver-https> , for configuring git-review to use https on port 443,
> but
> >this still isn't working (times out with "Could not connect to
> gerrit").
> >I've confirmed that I can reach other
> > external sites on port 443.
> >Can someone give me a hand with this?
> >
> >
> >
> >
> >
> >
> >
> >Hello.
> >
> >- Can you please post all output from "git review -vs"?
> >- Do you have "gerrit" remote already configured?
> >- Do you have access to
> >https://review.openstack.org/ <https://review.openstack.org/> from
> your
> >browser?
> >- Can you access it from command line (via "curl -I
> >https://review.openstack.org/ <https://review.openstack.org/>" for
> >example)?
> >- Does "git ls-remote
> >https://review.openstack.org/openstack/nova
> ><https://review.openstack.org/openstack/nova> > /dev/null" produce
> and
> >error?
> >
> >
> >
> >
> >__________________________________________________________________
> ________
> >OpenStack Development Mailing List (not for usage questions)
> >Unsubscribe:
> >OpenStack-dev-request at lists.openstack.org?subject:unsubscribe
> ><http://OpenStack-dev-
> request at lists.openstack.org?subject:unsubscribe>
> >http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
> >
> >
> >
> >
> >
> >
> >
> >
> >
> >
> >
> >__________________________________________________________________
> ________
> >OpenStack Development Mailing List (not for usage questions)
> >Unsubscribe:
> >OpenStack-dev-request at lists.openstack.org?subject:unsubscribe
> ><http://OpenStack-dev-
> request at lists.openstack.org?subject:unsubscribe>
> >http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
> >
> >
> >
> >
> >
> >
> >
> >
> >
> >
> >
> >__________________________________________________________________
> ________
> >OpenStack Development Mailing List (not for usage questions)
> >Unsubscribe:
> >OpenStack-dev-request at lists.openstack.org?subject:unsubscribe
> ><http://OpenStack-dev-
> request at lists.openstack.org?subject:unsubscribe>
> >http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
> >
> >
> >
> >
> >
> >
> >
> >
> 
> ___________________________________________________________________
> _______
> OpenStack Development Mailing List (not for usage questions)
> Unsubscribe: OpenStack-dev-
> request at lists.openstack.org?subject:unsubscribe
> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev


More information about the OpenStack-dev mailing list