Open Stack

Hi, All:
        I've deployed an undercloud baremetal with tripleO devtest. But
when I was trying to add endpoints to keystone and use other services like
nova and glance, it always has certificate error.* I can not use any
service except keystone in undercloud machine when I source undercloudrc.*
Please help me .
        It always has “*Verify error: Command 'openssl' returned non-zero
exit status 4*”.
        I save the token in one file, and run "*sudo openssl cms -verify
-certfile /tmp/keystone-signing-R8K0yX/**signing_cert.pem -CAfile
/tmp/keystone-signing-R8K0yX/**cacert.pem -inform PEM -nosmimecap -nodetach
-nocerts -noattr -in token.txt*”, it reports error “*Verification failure*
*3074320060:error:2E099064:CMS
routines:CMS_SIGNERINFO_VERIFY_CERT:certificate verify
error:cms_smime.c:304:Verify error:certificate is not yet valid*"

 Below are error logs:

 2010-08-28 04:04:25.738 16927 DEBUG keystonemiddleware.auth_token [-]
Server reports support for api versions: v3.0, v2.0 _get_supported_versions
/opt/stack/venvs/openstack/local/lib/python2.7/site-packages/keystonemiddleware/auth_token.py:1253

2010-08-28 04:04:25.738 16927 INFO keystonemiddleware.auth_token [-] Auth
Token confirmed use of v3.0 apis

2010-08-28 04:04:25.748 16927 DEBUG keystonemiddleware.auth_token [-]
data(-----BEGIN CMS-----

MIIBygYJKoZIhvcNAQcCoIIBuzCCAbcCAQExDTALBglghkgBZQMEAgEwHgYJKoZI

hvcNAQcBoBEED3sicmV2b2tlZCI6IFtdfTGCAYEwggF9AgEBMFgwUzELMAkGA1UE

BhMCWFgxDjAMBgNVBAgTBVVuc2V0MQ4wDAYDVQQHEwVVbnNldDEOMAwGA1UEChMF

VW5zZXQxFDASBgNVBAMTC0tleXN0b25lIENBAgECMAsGCWCGSAFlAwQCATANBgkq

hkiG9w0BAQEFAASCAQB2lxoXMw1l8DBRUxxD9iLep85XrJMnHspEE94GEUnZkaH1

FkGWUqdCVSXcsvVcuWcQKb9ZjMwGnBeTYNeqc66Fezy4Sg2HSbXjne7uk4giGIe+

7fOeGVl25q05zjUmwrUzZRKv4vpLaQxZctxSGSRXNrDdmRcrC02YFVm6/Mghpvtx

4SjWk5EWrq+/ZxQ2sFxjYVSREF6YjpPf+PcS6Hh9ieBpUH2GGm+kr4/KdIyyrHlm

SRItYmsxE3fF1n2N23bQQULkdNotRzj8fIYJLEno7XWqvMxqQKUTyQBTlfVTfpo5

kumS9+5On4Gx2vc2ZLQEjQT0lEOxyaV4ze3+3Fc2

-----END CMS-----

) verify
/opt/stack/venvs/openstack/local/lib/python2.7/site-packages/keystonemiddleware/auth_token.py:867

2010-08-28 04:04:25.749 16927 DEBUG keystonemiddleware.auth_token [-]
_signing_cert_file_name(/tmp/keystone-signing-TASGp3/signing_cert.pem)
verify
/opt/stack/venvs/openstack/local/lib/python2.7/site-packages/keystonemiddleware/auth_token.py:868

2010-08-28 04:04:25.749 16927 DEBUG keystonemiddleware.auth_token [-]
_signing_ca_file_name(/tmp/keystone-signing-TASGp3/cacert.pem) verify
/opt/stack/venvs/openstack/local/lib/python2.7/site-packages/keystonemiddleware/auth_token.py:869

2010-08-28 04:04:25.755 16927 WARNING keystonemiddleware.auth_token [-]
Verify error: Command 'openssl' returned non-zero exit status 4

2010-08-28 04:04:25.755 16927 DEBUG keystonemiddleware.auth_token [-] Token
validation failure. _validate_user_token
/opt/stack/venvs/openstack/local/lib/python2.7/site-packages/keystonemiddleware/auth_token.py:687

2010-08-28 04:04:25.755 16927 TRACE keystonemiddleware.auth_token Traceback
(most recent call last):

2010-08-28 04:04:25.755 16927 TRACE keystonemiddleware.auth_token   File
"/opt/stack/venvs/openstack/local/lib/python2.7/site-packages/keystonemiddleware/auth_token.py",
line 671, in _validate_user_token

2010-08-28 04:04:25.755 16927 TRACE keystonemiddleware.auth_token
verified = self._verify_pkiz_token(user_token, token_ids)

2010-08-28 04:04:25.755 16927 TRACE keystonemiddleware.auth_token   File
"/opt/stack/venvs/openstack/local/lib/python2.7/site-packages/keystonemiddleware/auth_token.py",
line 905, in _verify_pkiz_token

2010-08-28 04:04:25.755 16927 TRACE keystonemiddleware.auth_token     if
self._is_signed_token_revoked(token_ids):

2010-08-28 04:04:25.755 16927 TRACE keystonemiddleware.auth_token   File
"/opt/stack/venvs/openstack/local/lib/python2.7/site-packages/keystonemiddleware/auth_token.py",
line 845, in _is_signed_token_revoked

2010-08-28 04:04:25.755 16927 TRACE keystonemiddleware.auth_token     if
self._is_token_id_in_revoked_list(token_id):

2010-08-28 04:04:25.755 16927 TRACE keystonemiddleware.auth_token   File
"/opt/stack/venvs/openstack/local/lib/python2.7/site-packages/keystonemiddleware/auth_token.py",
line 852, in _is_token_id_in_revoked_list

2010-08-28 04:04:25.755 16927 TRACE keystonemiddleware.auth_token
revocation_list = self._token_revocation_list

2010-08-28 04:04:25.755 16927 TRACE keystonemiddleware.auth_token   File
"/opt/stack/venvs/openstack/local/lib/python2.7/site-packages/keystonemiddleware/auth_token.py",
line 963, in _token_revocation_list

2010-08-28 04:04:25.755 16927 TRACE keystonemiddleware.auth_token
self._token_revocation_list = self._fetch_revocation_list()

2010-08-28 04:04:25.755 16927 TRACE keystonemiddleware.auth_token   File
"/opt/stack/venvs/openstack/local/lib/python2.7/site-packages/keystonemiddleware/auth_token.py",
line 997, in _fetch_revocation_list

2010-08-28 04:04:25.755 16927 TRACE keystonemiddleware.auth_token
return self._cms_verify(revocation_list_data)

2010-08-28 04:04:25.755 16927 TRACE keystonemiddleware.auth_token   File
"/opt/stack/venvs/openstack/local/lib/python2.7/site-packages/keystonemiddleware/auth_token.py",
line 888, in _cms_verify

2010-08-28 04:04:25.755 16927 TRACE keystonemiddleware.auth_token
return verify()

2010-08-28 04:04:25.755 16927 TRACE keystonemiddleware.auth_token   File
"/opt/stack/venvs/openstack/local/lib/python2.7/site-packages/keystonemiddleware/auth_token.py",
line 874, in verify

2010-08-28 04:04:25.755 16927 TRACE keystonemiddleware.auth_token
inform=inform).decode('utf-8')

2010-08-28 04:04:25.755 16927 TRACE keystonemiddleware.auth_token   File
"/opt/stack/venvs/openstack/local/lib/python2.7/site-packages/keystoneclient/common/cms.py",
line 178, in cms_verify

2010-08-28 04:04:25.755 16927 TRACE keystonemiddleware.auth_token     raise
e

2010-08-28 04:04:25.755 16927 TRACE keystonemiddleware.auth_token
CalledProcessError: Command 'openssl' returned non-zero exit status 4

2010-08-28 04:04:25.755 16927 TRACE keystonemiddleware.auth_token

2010-08-28 04:04:25.757 16927 DEBUG keystonemiddleware.auth_token [-]
Marking token as unauthorized in cache store_invalid
/opt/stack/venvs/openstack/local/lib/python2.7/site-packages/keystonemiddleware/auth_token.py:1501

2010-08-28 04:04:25.757 16927 WARNING keystonemiddleware.auth_token [-]
Authorization failed for token

2010-08-28 04:04:25.757 16927 INFO keystonemiddleware.auth_token [-]
Invalid user token - deferring reject downstream
*Best Regards！*


*Chao Yan--------------**My twitter：Andy Yan @yanchao727
<https://twitter.com/yanchao727>*


*My Weibo：http://weibo.com/herewearenow
<http://weibo.com/herewearenow>--------------*
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openstack.org/pipermail/openstack/attachments/20140814/fd4eb543/attachment.html>