[Openstack-operators] ocata octavia apmhora ssl error

Ignazio Cassano ignaziocassano at gmail.com
Fri May 11 16:28:35 UTC 2018


Hi eveyone,
I am trying to configura octavia lbaas on ocata centos 7.

When I create the load balancer a vm is created from amphora image but
worker log reports:

018-05-11 17:38:56.013 125607 WARNING
octavia.amphorae.drivers.haproxy.rest_api_driver [-] Could not connect to
instance. Retrying.
2018-05-11 17:39:01.016 125607 WARNING
octavia.amphorae.drivers.haproxy.rest_api_driver [-] Could not connect to
instance. Retrying.


I think it is trying to connect the amphora instance on port 9443 but in
the amphora instance  /var/log/amphora-agent.log file the following is
reported:

2018-05-11 15:38:45 +0000] [900] [DEBUG] Failed to send error message.
[2018-05-11 15:38:50 +0000] [900] [DEBUG] Error processing SSL request.
[2018-05-11 15:38:50 +0000] [900] [DEBUG] Invalid request from ip=::ffff:
10.138.176.96: [SSL: SSL_HANDSHAKE_FAILURE] ssl handshake failure
(_ssl.c:1977)
[2018-05-11 15:38:50 +0000] [900] [DEBUG] Failed to send error message.
[2018-05-11 15:38:55 +0000] [900] [DEBUG] Error processing SSL request.
[2018-05-11 15:38:55 +0000] [900] [DEBUG] Invalid request from ip=::ffff:
10.138.176.96: [SSL: SSL_HANDSHAKE_FAILURE] ssl handshake failure
(_ssl.c:1977)
[2018-05-11 15:38:55 +0000] [900] [DEBUG] Failed to send error message.
[2018-05-11 15:39:00 +0000] [900] [DEBUG] Error processing SSL request.
[2018-05-11 15:39:00 +0000] [900] [DEBUG] Invalid request from ip=::ffff:
10.138.176.96: [SSL: SSL_HANDSHAKE_FAILURE] ssl handshake failure
(_ssl.c:1977)
[2018-05-11 15:39:00 +0000] [900] [DEBUG] Failed to send error message.

10.138.176.96 is the address of my controller worker.

Security groups allow any protocol any port
there aren't connection problem between networks.
Probably some errors in certificate creation....
Anyone can help me, please?

Is possible to disable  ssl for testing ?

Regards
Ignazio
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openstack.org/pipermail/openstack-operators/attachments/20180511/77cf5f22/attachment.html>


More information about the OpenStack-operators mailing list