<div dir="ltr"><div>Hi,</div><div><br></div><div>I disabled TLS in globals.yml then tried to deploy openstack, but it does not work, the deployment still uses https.</div><div>How can I make a workaround?<br></div></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">Le mar. 11 oct. 2022 à 12:08, wodel youchi <<a href="mailto:wodel.youchi@gmail.com">wodel.youchi@gmail.com</a>> a écrit :<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div dir="ltr">Anyone???<br></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">Le lun. 10 oct. 2022 à 12:21, wodel youchi <<a href="mailto:wodel.youchi@gmail.com" target="_blank">wodel.youchi@gmail.com</a>> a écrit :<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div dir="ltr"><div>Hi,</div><div><br></div><div>I tried to deploy a new certificate using :kolla-ansible reconfigure <br></div><div>But I got :</div><div><br></div><div>"module_stderr": "<b>Failed to discover available identity versions when contacting <a href="https://dashint.cloud.exemple.com:35357" target="_blank">https://dashint.cloud.exemple.com:35357</a></b>. Attemptin<br>g to parse version from URL.\nTraceback (most recent call last):\n File \"/opt/ansible/lib/python3.6/site-packages/urllib3/connectio<br>npool.py\", line 706, in urlopen\n chunked=chunked,\n File \"/opt/ansible/lib/python3.6/site-packages/urllib3/connectionpool.py\"<br>, line 382, in _make_request\n self._validate_conn(conn)\n File \"/opt/ansible/lib/python3.6/site-packages/urllib3/connectionpool<br>.py\", line 1010, in _validate_conn\n conn.connect()\n File \"/opt/ansible/lib/python3.6/site-packages/urllib3/connection.py\", l<br>ine 421, in connect\n tls_in_tls=tls_in_tls,\n File \"/opt/ansible/lib/python3.6/site-packages/urllib3/util/ssl_.py\", line 450,<br>in ssl_wrap_socket\n sock, context, tls_in_tls, server_hostname=server_hostname\n File \"/opt/ansible/lib/python3.6/site-packages<br>/urllib3/util/ssl_.py\", line 493, in _ssl_wrap_socket_impl\n return ssl_context.wrap_socket(sock, server_hostname=server_hostname<br>)\n File \"/usr/lib64/python3.6/ssl.py\", line 365, in wrap_socket\n _context=self, _session=session)\n File \"/usr/lib64/python<br>3.6/ssl.py\", line 776, in __init__\n self.do_handshake()\n File \"/usr/lib64/python3.6/ssl.py\", line 1036, in do_handshake\n<br> self._sslobj.do_handshake()\n File \"/usr/lib64/python3.6/ssl.py\", line 648, in do_handshake\n self._sslobj.do_handshake()\nssl<br>.<b>SSLError: [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed</b></div><div><br></div><div>Some help please<br></div><div><br></div><div><br></div><div><br></div><div>Regards.<br></div></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">Le dim. 9 oct. 2022 à 16:19, wodel youchi <<a href="mailto:wodel.youchi@gmail.com" target="_blank">wodel.youchi@gmail.com</a>> a écrit :<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div dir="ltr"><div>Hi,</div><div><br></div><div>My SSL certificate has expired, and now I cannot authenticate into horizon and I have these errors :</div><div><b>WARNING keystoneauth.identity.generic.base [-] Failed to discover available identity versions when contacting <a href="https://dashint.cloud.exemple.com:35357" target="_blank">https://dashint.cloud.exemple.com:35357</a>. Attempting to parse version from URL.: keystoneauth1.exceptions.connection.SSLError: SSL exception connecting to https://
<a href="http://dashint.cloud.exemple.com" target="_blank">dashint.cloud.exemple.com</a>
:35357: HTTPSConnectionPool(host='
<a href="http://dashint.cloud.exemple.com" target="_blank">dashint.cloud.exemple.com</a>', port=35357): Max retries exceeded with url: / (Caused by SSLError(SSLError(1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:897)'),))</b></div><div><br></div><div>In my globals.yml I have this parameter :</div><div>kolla_verify_tls_backend: "no"</div><div><br></div><div>1 - How do I disable SSL verification for now?</div><div>2 - How to install a new SSL certificate?<br></div><div><br></div><div></div><div><br></div><div><br></div><div>Regards.<br></div></div>
</blockquote></div>
</blockquote></div>
</blockquote></div>