[Openstack] [Devstack] Enabling services in HTTPS mode

Rob Crittenden rcritten at redhat.com
Wed Jan 28 15:11:01 UTC 2015


Jayanthi Jeyakumar wrote:
> Stack.sh script is trying to execute this command from
> "/opt/stack/devstack/lib/neutron/ 
> 
>  if ! timeout $SERVICE_TIMEOUT sh -c "while ! wget ${ssl_ca} --no-proxy
> -q -O- $service_protocol://$Q_HOST:$service_port; do sleep 1; done"; then
>         die $LINENO "Neutron did not start"
> 
> The above command fails.
> 
> Logged on to q-svc screen and see this :
> 2015-01-28 22:35:31.502 INFO neutron.service [-] Neutron service
> started, listening on 0.0.0.0:9696 <http://0.0.0.0:9696>
> 2015-01-28 22:35:31.502 DEBUG stevedore.extension [-] found extension
> EntryPoint.parse('blocking =
> oslo.messaging._executors.impl_blocking:BlockingExecutor') from
> (pid=30482) _load_plugins
> /usr/local/lib/python2.7/dist-packages/stevedore/extension.py:156
> 2015-01-28 22:35:31.502 DEBUG stevedore.extension [-] found extension
> EntryPoint.parse('eventlet =
> oslo.messaging._executors.impl_eventlet:EventletExecutor') from
> (pid=30482) _load_plugins
> /usr/local/lib/python2.7/dist-packages/stevedore/extension.py:156
> 2015-01-28 22:35:31.502 INFO oslo.messaging._drivers.impl_rabbit [-]
> Connecting to AMQP server on <devstack-server-ip>:5672
> 2015-01-28 22:35:31.510 INFO neutron.wsgi [-] (30482) wsgi starting up
> on https://0.0.0.0:9696/
> 2015-01-28 22:35:31.512 INFO oslo.messaging._drivers.impl_rabbit [-]
> Connected to AMQP server on <devstack-server-ip>:5672

For starters, you should use a FQDN and not IP addresses with SSL. Set
SERVICE_HOST to your hostname.

I guess I'd next check that the service is responding to requests after
the install has failed:

curl -v --cacert /opt/stack/data/ca-bundle.pem  https://`hostname`:9696

You may get a different error message than wget.

rob

> 
> thanks,
> Jayanthi
> 
> On Tue, Jan 27, 2015 at 7:22 PM, Rob Crittenden <rcritten at redhat.com
> <mailto:rcritten at redhat.com>> wrote:
> 
>     Jayanthi Jeyakumar wrote:
>     > Hi All,
>     >
>     > Seeing the following error when i try to install openstack services in
>     > HTTPS mode .
> 
>     This exact question was asked last week,
>     http://lists.openstack.org/pipermail/openstack/2015-January/011286.html
> 
>     Check the screen logs for why the service didn't start.
> 
>     rob
> 
> 





More information about the Openstack mailing list