incorrect use of OPENSTACK_SSL_CACERT

Bug #1744992 reported by Stefan Nica
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
freezer-web-ui
New
Undecided
Unassigned

Bug Description

Configuring the OPENSTACK_SSL_CACERT dashboard option results in the following exception being raised:

[Tue Jan 23 16:43:03.458601 2018] [wsgi:error] [pid 15544:tid 140027908650752] Traceback (most recent call last):
[Tue Jan 23 16:43:03.458608 2018] [wsgi:error] [pid 15544:tid 140027908650752] File "/opt/stack/venv/horizon-20180122T133615Z/lib/python2.7/site-packages/disaster_recovery/utils.py", line 197, in wrapped_function
[Tue Jan 23 16:43:03.458613 2018] [wsgi:error] [pid 15544:tid 140027908650752] return function(view, *args, **kwargs)
[Tue Jan 23 16:43:03.458617 2018] [wsgi:error] [pid 15544:tid 140027908650752] File "/opt/stack/venv/horizon-20180122T133615Z/lib/python2.7/site-packages/disaster_recovery/jobs/views.py", line 32, in get_jobs_data
[Tue Jan 23 16:43:03.458621 2018] [wsgi:error] [pid 15544:tid 140027908650752] return freezer_api.Job(self.request).list(limit=100)
[Tue Jan 23 16:43:03.458625 2018] [wsgi:error] [pid 15544:tid 140027908650752] File "/opt/stack/venv/horizon-20180122T133615Z/lib/python2.7/site-packages/disaster_recovery/api/api.py", line 124, in list
[Tue Jan 23 16:43:03.458639 2018] [wsgi:error] [pid 15544:tid 140027908650752] search=search)
[Tue Jan 23 16:43:03.458643 2018] [wsgi:error] [pid 15544:tid 140027908650752] File "/opt/stack/venv/horizon-20180122T133615Z/lib/python2.7/site-packages/freezerclient/v1/managers/jobs.py", line 55, in list_all
[Tue Jan 23 16:43:03.458647 2018] [wsgi:error] [pid 15544:tid 140027908650752] r = requests.get(self.endpoint, headers=self.headers,
[Tue Jan 23 16:43:03.458650 2018] [wsgi:error] [pid 15544:tid 140027908650752] File "/opt/stack/venv/horizon-20180122T133615Z/lib/python2.7/site-packages/freezerclient/v1/managers/jobs.py", line 31, in headers
[Tue Jan 23 16:43:03.458654 2018] [wsgi:error] [pid 15544:tid 140027908650752] return utils.create_headers_for_request(self.client.auth_token)
[Tue Jan 23 16:43:03.458657 2018] [wsgi:error] [pid 15544:tid 140027908650752] File "/opt/stack/venv/horizon-20180122T133615Z/lib/python2.7/site-packages/freezerclient/v1/client.py", line 183, in auth_token
[Tue Jan 23 16:43:03.458661 2018] [wsgi:error] [pid 15544:tid 140027908650752] return self.session.get_token()
[Tue Jan 23 16:43:03.458664 2018] [wsgi:error] [pid 15544:tid 140027908650752] File "/opt/stack/venv/horizon-20180122T133615Z/lib/python2.7/site-packages/keystoneauth1/session.py", line 927, in get_token
[Tue Jan 23 16:43:03.458667 2018] [wsgi:error] [pid 15544:tid 140027908650752] return (self.get_auth_headers(auth) or {}).get('X-Auth-Token')
[Tue Jan 23 16:43:03.458671 2018] [wsgi:error] [pid 15544:tid 140027908650752] File "/opt/stack/venv/horizon-20180122T133615Z/lib/python2.7/site-packages/keystoneauth1/session.py", line 905, in get_auth_headers
[Tue Jan 23 16:43:03.458675 2018] [wsgi:error] [pid 15544:tid 140027908650752] return auth.get_headers(self, **kwargs)
[Tue Jan 23 16:43:03.458679 2018] [wsgi:error] [pid 15544:tid 140027908650752] File "/opt/stack/venv/horizon-20180122T133615Z/lib/python2.7/site-packages/keystoneauth1/plugin.py", line 90, in get_headers
[Tue Jan 23 16:43:03.458683 2018] [wsgi:error] [pid 15544:tid 140027908650752] token = self.get_token(session)
[Tue Jan 23 16:43:03.458686 2018] [wsgi:error] [pid 15544:tid 140027908650752] File "/opt/stack/venv/horizon-20180122T133615Z/lib/python2.7/site-packages/keystoneauth1/identity/base.py", line 89, in get_token
[Tue Jan 23 16:43:03.458691 2018] [wsgi:error] [pid 15544:tid 140027908650752] return self.get_access(session).auth_token
[Tue Jan 23 16:43:03.458695 2018] [wsgi:error] [pid 15544:tid 140027908650752] File "/opt/stack/venv/horizon-20180122T133615Z/lib/python2.7/site-packages/keystoneauth1/identity/base.py", line 135, in get_access
[Tue Jan 23 16:43:03.458699 2018] [wsgi:error] [pid 15544:tid 140027908650752] self.auth_ref = self.get_auth_ref(session)
[Tue Jan 23 16:43:03.458703 2018] [wsgi:error] [pid 15544:tid 140027908650752] File "/opt/stack/venv/horizon-20180122T133615Z/lib/python2.7/site-packages/keystoneauth1/identity/v3/base.py", line 167, in get_auth_ref
[Tue Jan 23 16:43:03.458712 2018] [wsgi:error] [pid 15544:tid 140027908650752] authenticated=False, log=False, **rkwargs)
[Tue Jan 23 16:43:03.458716 2018] [wsgi:error] [pid 15544:tid 140027908650752] File "/opt/stack/venv/horizon-20180122T133615Z/lib/python2.7/site-packages/keystoneauth1/session.py", line 853, in post
[Tue Jan 23 16:43:03.458712 2018] [wsgi:error] [pid 15544:tid 140027908650752] authenticated=False, log=False, **rkwargs)
[Tue Jan 23 16:43:03.458716 2018] [wsgi:error] [pid 15544:tid 140027908650752] File "/opt/stack/venv/horizon-20180122T133615Z/lib/python2.7/site-packages/keystoneauth1/session.py", line 853, in post
[Tue Jan 23 16:43:03.458720 2018] [wsgi:error] [pid 15544:tid 140027908650752] return self.request(url, 'POST', **kwargs)
[Tue Jan 23 16:43:03.458723 2018] [wsgi:error] [pid 15544:tid 140027908650752] File "/opt/stack/venv/horizon-20180122T133615Z/lib/python2.7/site-packages/positional/__init__.py", line 108, in inner
[Tue Jan 23 16:43:03.458727 2018] [wsgi:error] [pid 15544:tid 140027908650752] return wrapped(*args, **kwargs)
[Tue Jan 23 16:43:03.458730 2018] [wsgi:error] [pid 15544:tid 140027908650752] File "/opt/stack/venv/horizon-20180122T133615Z/lib/python2.7/site-packages/keystoneauth1/session.py", line 703, in request
[Tue Jan 23 16:43:03.458733 2018] [wsgi:error] [pid 15544:tid 140027908650752] resp = send(**kwargs)
[Tue Jan 23 16:43:03.458741 2018] [wsgi:error] [pid 15544:tid 140027908650752] File "/opt/stack/venv/horizon-20180122T133615Z/lib/python2.7/site-packages/keystoneauth1/session.py", line 761, in _send_request
[Tue Jan 23 16:43:03.458745 2018] [wsgi:error] [pid 15544:tid 140027908650752] resp = self.session.request(method, url, **kwargs)
[Tue Jan 23 16:43:03.458749 2018] [wsgi:error] [pid 15544:tid 140027908650752] File "/opt/stack/venv/horizon-20180122T133615Z/lib/python2.7/site-packages/requests/sessions.py", line 502, in request
[Tue Jan 23 16:43:03.458752 2018] [wsgi:error] [pid 15544:tid 140027908650752] resp = self.send(prep, **send_kwargs)
[Tue Jan 23 16:43:03.458755 2018] [wsgi:error] [pid 15544:tid 140027908650752] File "/opt/stack/venv/horizon-20180122T133615Z/lib/python2.7/site-packages/requests/sessions.py", line 612, in send
[Tue Jan 23 16:43:03.458759 2018] [wsgi:error] [pid 15544:tid 140027908650752] r = adapter.send(request, **kwargs)
[Tue Jan 23 16:43:03.458762 2018] [wsgi:error] [pid 15544:tid 140027908650752] File "/opt/stack/venv/horizon-20180122T133615Z/lib/python2.7/site-packages/requests/adapters.py", line 440, in send
[Tue Jan 23 16:43:03.458766 2018] [wsgi:error] [pid 15544:tid 140027908650752] timeout=timeout
[Tue Jan 23 16:43:03.458769 2018] [wsgi:error] [pid 15544:tid 140027908650752] File "/opt/stack/venv/horizon-20180122T133615Z/lib/python2.7/site-packages/urllib3/connectionpool.py", line 601, in urlopen
[Tue Jan 23 16:43:03.458772 2018] [wsgi:error] [pid 15544:tid 140027908650752] chunked=chunked)
[Tue Jan 23 16:43:03.458775 2018] [wsgi:error] [pid 15544:tid 140027908650752] File "/opt/stack/venv/horizon-20180122T133615Z/lib/python2.7/site-packages/urllib3/connectionpool.py", line 346, in _make_request
[Tue Jan 23 16:43:03.458779 2018] [wsgi:error] [pid 15544:tid 140027908650752] self._validate_conn(conn)
[Tue Jan 23 16:43:03.458782 2018] [wsgi:error] [pid 15544:tid 140027908650752] File "/opt/stack/venv/horizon-20180122T133615Z/lib/python2.7/site-packages/urllib3/connectionpool.py", line 850, in _validate_conn
[Tue Jan 23 16:43:03.458875 2018] [wsgi:error] [pid 15544:tid 140027908650752] conn.connect()
[Tue Jan 23 16:43:03.458882 2018] [wsgi:error] [pid 15544:tid 140027908650752] File "/opt/stack/venv/horizon-20180122T133615Z/lib/python2.7/site-packages/urllib3/connection.py", line 326, in connect
[Tue Jan 23 16:43:03.458886 2018] [wsgi:error] [pid 15544:tid 140027908650752] ssl_context=context)
[Tue Jan 23 16:43:03.458890 2018] [wsgi:error] [pid 15544:tid 140027908650752] File "/opt/stack/venv/horizon-20180122T133615Z/lib/python2.7/site-packages/urllib3/util/ssl_.py", line 327, in ssl_wrap_socket
[Tue Jan 23 16:43:03.458895 2018] [wsgi:error] [pid 15544:tid 140027908650752] context.load_cert_chain(certfile, keyfile)
[Tue Jan 23 16:43:03.458899 2018] [wsgi:error] [pid 15544:tid 140027908650752] File "/opt/stack/venv/horizon-20180122T133615Z/lib/python2.7/site-packages/urllib3/contrib/pyopenssl.py", line 424, in load_cert_chain
[Tue Jan 23 16:43:03.458907 2018] [wsgi:error] [pid 15544:tid 140027908650752] self._ctx.use_privatekey_file(keyfile or certfile)
[Tue Jan 23 16:43:03.458910 2018] [wsgi:error] [pid 15544:tid 140027908650752] File "/opt/stack/venv/horizon-20180122T133615Z/lib/python2.7/site-packages/OpenSSL/SSL.py", line 875, in use_privatekey_file
[Tue Jan 23 16:43:03.458914 2018] [wsgi:error] [pid 15544:tid 140027908650752] self._raise_passphrase_exception()
[Tue Jan 23 16:43:03.458929 2018] [wsgi:error] [pid 15544:tid 140027908650752] File "/opt/stack/venv/horizon-20180122T133615Z/lib/python2.7/site-packages/OpenSSL/SSL.py", line 854, in _raise_passphrase_exception
[Tue Jan 23 16:43:03.458933 2018] [wsgi:error] [pid 15544:tid 140027908650752] _raise_current_error()
[Tue Jan 23 16:43:03.458936 2018] [wsgi:error] [pid 15544:tid 140027908650752] File "/opt/stack/venv/horizon-20180122T133615Z/lib/python2.7/site-packages/OpenSSL/_util.py", line 54, in exception_from_error_queue
[Tue Jan 23 16:43:03.458945 2018] [wsgi:error] [pid 15544:tid 140027908650752] raise exception_type(errors)
[Tue Jan 23 16:43:03.458949 2018] [wsgi:error] [pid 15544:tid 140027908650752] Error: [('PEM routines', 'PEM_read_bio', 'no start line'), ('SSL routines', 'SSL_CTX_use_PrivateKey_file', 'PEM lib')]

description: updated
no longer affects: freezer
Revision history for this message
Stefan Nica (stefan.nica) wrote :
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix included in openstack/freezer-web-ui 6.0.0.0b3

This issue was fixed in the openstack/freezer-web-ui 6.0.0.0b3 development milestone.

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.