Swift CLI can't access to keystone with self signed certification
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
python-swiftclient |
Fix Released
|
Undecided
|
You Yamagata |
Bug Description
OS ver. Ubuntu 12.04.1 LTS
python-swiftclient 1:1.2.0-
python-
I am building a swift cluster with keystone using CloudArchive and
having a trouble on keystone auth with self signed certification.
I built a keystone server with ssl reverse proxy by apache.
The SSL certification is self-signed one.
When I tried to access swift server via swift CLI, an error happened as follows.
>swift -V 2 -A https:/
Traceback (most recent call last):
File "/usr/bin/swift", line 1190, in <module>
error_queue)
File "/usr/bin/swift", line 567, in st_stat
headers = conn.head_account()
File "/usr/lib/
return self._retry(None, head_account)
File "/usr/lib/
self.url, self.token = self.get_auth()
File "/usr/lib/
os_
File "/usr/lib/
key, kwargs[
File "/usr/lib/
client_2_0
auth_
File "/usr/lib/
self.
File "/usr/lib/
enticate
"%s" % e)
keystoneclient.
e with identity service: [Errno 1] _ssl.c:504: error:14090086:SSL routines:
_CERTIFICATE:
When I accessed to keystone directly without SSL as follows, swift CLI worked well.
>swift -V 2 -A http://
Account: AUTH_xxxxxxxxxx
Containers: 2
Objects: 1
Bytes: 859
X-Timestamp: 1352458813.40642
X-Trans-Id: txe5b3ac1dc0594
Accept-Ranges: bytes
I guess that the cause is swift CLI doesn't support --insecure option.
As a trial, I modified swiftclient/
In this case CLI worked well.
> diff -C 5 client.py client.py.fix
*** client.py 2012-09-13 05:31:06.000000000 +0900
--- client.py.fix 2012-11-12 18:11:37.948722753 +0900
***************
*** 239,248 ****
--- 239,249 ----
from keystoneclient import exceptions
_ksclient = ksclient.
+ insecure=True,
service_type = os_options.
endpoint_type = os_options.
try:
endpoint = _ksclient.
Changed in python-swiftclient: | |
assignee: | nobody → You Yamagata (y-yamagata) |
Changed in python-swiftclient: | |
status: | New → In Progress |
Changed in python-swiftclient: | |
status: | Fix Committed → Fix Released |
Fix proposed to branch: master /review. openstack. org/17524
Review: https:/