[Openstack] [tripleo] can't deploy Newton undercloud

Bernd Bausch berndbausch at gmail.com
Mon Nov 5 12:03:39 UTC 2018


Yep, after commenting anything that seems to be remotely linked with
"certificate" or "SSL", undercloud installation comletes. Many thanks,
gentlemen!

If anybody has an idea how to successfully deploy a Newton undercloud
/with /SSL, it would be great to hear.

Bernd.

On 11/5/2018 7:49 PM, Juan Antonio Osorio wrote:
> What about the option "generate_service_certificate", that is 'true'
> by default, and you would need to set that as false.
>
>
> On Mon, Nov 5, 2018 at 12:16 PM Bernd Bausch <berndbausch at gmail.com
> <mailto:berndbausch at gmail.com>> wrote:
>
>     Thanks for the hint, Remo.
>
>     Unfortunately the reboot didn't help. Do you know how to switch
>     off SSL? I only see this in undercloud.conf:
>
>         # Certificate file to use for OpenStack service SSL connections.
>         # Setting this enables SSL for the OpenStack API endpoints,
>         leaving it
>         # unset disables SSL. (string value)
>         #undercloud_service_certificate =
>
>     The problem: It is already unset. Is there a way to unset it even
>     more? (kidding)
>
>     The Tripleo web site has a section how to enable SSL, but AFAIK
>     nothing now to not enable it.
>
>     I added the openstack list back to the CC.
>
>     Bernd
>
>     On 11/5/2018 4:50 PM, Remo Mattei wrote:
>>     Try to turn ssl off there is a bug that may be the issue here but
>>     if you reboot the under cloud and retry to re-run the install it
>>     May finishes. So before turning off ssl try reboot rerun install
>>     and see what happen. 
>
>     _______________________________________________
>     Mailing list:
>     http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
>     Post to     : openstack at lists.openstack.org
>     <mailto:openstack at lists.openstack.org>
>     Unsubscribe :
>     http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
>
>
>
> -- 
> Juan Antonio Osorio R.
> e-mail: jaosorior at gmail.com <mailto:jaosorior at gmail.com>
>

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openstack.org/pipermail/openstack/attachments/20181105/11ec7501/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: OpenPGP digital signature
URL: <http://lists.openstack.org/pipermail/openstack/attachments/20181105/11ec7501/attachment.sig>


More information about the Openstack mailing list