[Openstack-operators] Problem getting cloudkitty to connect to keystone via ssl

Sherdil, Ghezal (GSFC-720.0)[BUSINESS INTEGRA, INC.] ghezal.sherdil at nasa.gov
Mon Dec 4 21:30:58 UTC 2017


Hello,

I am trying to add the cloudkitty service to our currently pike setup but I am having issues getting cloudkitty to connect to keystone via SSL. SSL is configured in the cloudkitty.conf file. Below is the currently error I am getting. I have created a bug on Launchpad: https://bugs.launchpad.net/cloudkitty/+bug/1735475
Any help would be much appreciated.

Thanks,
Ghezal


[root at cloudkitty1 cloudkitty]# systemctl restart cloudkitty-processor.service
[root at cloudkitty1 cloudkitty]# tail /var/log/cloudkitty/processor.log
2017-12-04 16:19:11.738 6042 ERROR cloudkitty   File "/usr/lib/python2.7/site-packages/keystoneauth1/session.py", line 853, in post
2017-12-04 16:19:11.738 6042 ERROR cloudkitty     return self.request(url, 'POST', **kwargs)
2017-12-04 16:19:11.738 6042 ERROR cloudkitty   File "/usr/lib/python2.7/site-packages/positional/__init__.py", line 101, in inner
2017-12-04 16:19:11.738 6042 ERROR cloudkitty     return wrapped(*args, **kwargs)
2017-12-04 16:19:11.738 6042 ERROR cloudkitty   File "/usr/lib/python2.7/site-packages/keystoneauth1/session.py", line 703, in request
2017-12-04 16:19:11.738 6042 ERROR cloudkitty     resp = send(**kwargs)
2017-12-04 16:19:11.738 6042 ERROR cloudkitty   File "/usr/lib/python2.7/site-packages/keystoneauth1/session.py", line 765, in _send_request
2017-12-04 16:19:11.738 6042 ERROR cloudkitty     raise exceptions.SSLError(msg)
2017-12-04 16:19:11.738 6042 ERROR cloudkitty SSLError: SSL exception connecting to https://keystone.gpctest:5000/v3/auth/tokens: ("bad handshake: Error([('SSL routines', 'ssl3_get_server_certificate', 'certificate verify failed')],)",)
2017-12-04 16:19:11.738 6042 ERROR cloudkitty

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openstack.org/pipermail/openstack-operators/attachments/20171204/c5f039e1/attachment.html>


More information about the OpenStack-operators mailing list