[Openstack-operators] Nova-compute cannot connect to Keystone/SSL

Alvise Dorigo alvise.dorigo at pd.infn.it
Thu May 29 07:07:43 UTC 2014


On 28 May 2014, at 19:38, gustavo panizzo <gfa> wrote:

> On 05/28/2014 02:27 PM, Alvise Dorigo wrote:
> 
>> 2014-05-28 19:24:35.696 10673 TRACE nova.compute.manager   File "/usr/lib/python2.6/site-packages/neutronclient/client.py", line 148, in _cs_request
>> 2014-05-28 19:24:35.696 10673 TRACE nova.compute.manager     raise exceptions.SslCertificateValidationError(reason=e)
>> 2014-05-28 19:24:35.696 10673 TRACE nova.compute.manager SslCertificateValidationError: SSL certificate validation has failed: [Errno 1] _ssl.c:492: error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed
>> 2014-05-28 19:24:35.696 10673 TRACE nova.compute.manager 
> 
> is your CA certificate imported, do you 'trust' your nova cert? in
> debian that would mean add it to /etc/ssl/certs
> 

Hi Gustavo,
I’ve copied my CA cert.pem in that directory (I’m running on CentOS 6.5), but it doesn’t seem to cure the problem.
I wonder if I’ve to add some particular parameter in /etc/nova/nova.conf, as I did for glance and other services: cafile, which is not documented.

	A.


More information about the OpenStack-operators mailing list