When building glance-base image as centos/binary from stable/liberty branch build errors with the following output:
INFO:__main__:glance-base:Public key for librbd1-0.94.5-0.el7.centos.x86_64.rpm is not installed
INFO:__main__:glance-base:--------------------------------------------------------------------------------
INFO:__main__:glance-base:Total 522 kB/s | 43 MB 01:24
INFO:__main__:glance-base:Retrieving key from https://ceph.com/git/?p=ceph.git;a=blob_plain;f=keys/release.asc
INFO:__main__:glance-base:
INFO:__main__:glance-base:GPG key retrieval failed: [Errno 14] curl#60 - "Peer's Certificate has expired."
INFO:__main__:glance-base:
INFO:__main__:glance-base:Removing intermediate container c93be8957813
ERROR:__main__:glance-base:Error'd with the following message
ERROR:__main__:glance-base:The command '/bin/sh -c yum -y install openstack-glance python-oslo-i18n python-castellan python-cryptography python-rbd python-rados && yum clean all && mkdir -p /etc/ceph/' returned a non-zero code: 1
Happends also with other images that try to retrieve ceph key.
When trying key download form build host:
[root@kolla ~]# curl https:/
curl: (60) Peer's Certificate has expired.
More details here: http://
curl performs SSL certificate verification by default, using a "bundle"
of Certificate Authority (CA) public keys (CA certs). If the default
bundle file isn't adequate, you can specify an alternate file
using the --cacert option.
If this HTTPS server uses a certificate signed by a CA represented in
the bundle, the certificate verification probably failed due to a
problem with the certificate (it might be expired, or the name might
not match the domain name in the URL).
If you'd like to turn off curl's verification of the certificate, use
the -k (or --insecure) option.
[root@kolla ~]# cat /etc/centos-release
CentOS Linux release 7.2.1511 (Core)