[Openstack] SSL cert issue on openstack client

CHOW Anthony anthony.chow at al-enterprise.com
Wed Mar 23 00:38:58 UTC 2016


It seems like your CentOS 7 server is not able to verify the KeyStone server's certificate.

	[Errno 1] _ssl.c:504: error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate 	verify failed

Interesting issue.  

Anthony.
-----Original Message-----
From: Jagga Soorma [mailto:jagga13 at gmail.com] 
Sent: Tuesday, March 22, 2016 5:18 PM
To: openstack
Subject: [Openstack] SSL cert issue on openstack client

Hi Guys,

I am new to openstack and currently have a openstack environment that seems to have ssl enabled.  From my mac I am able to use the openstack api without any issues and without having to do anything for ssl.
However, from my CentOS 7.1 server I get the following error message:

--
bash-4.2$ openstack image list
Discovering versions from the identity service failed when creating the password plugin. Attempting to determine version from URL.
SSL exception connecting to https://xxx.yyy.com:5000/v3/auth/tokens:
[Errno 1] _ssl.c:504: error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed
--

I do seem to have the ca certificates installed:

--
$ rpm -qa | grep -i ca-cert
ca-certificates-2015.2.4-70.0.el7_1.noarch
--

Is there something extra that I need to do in order to get the openstack api working on CentOS?

Not having much luck with this.  Any help would be appreciated.

Thanks!

_______________________________________________
Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
Post to     : openstack at lists.openstack.org
Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack




More information about the Openstack mailing list