[Bug 1347150] Re: [SRU] switch to requests breaks HTTPS support
Corey Bryant
corey.bryant at canonical.com
Tue Jan 12 14:23:33 UTC 2016
Apologies for the late update on this bug as this fix has been available
for a while now. This is fixed in python-glanceclient
1:0.14.0-0ubuntu1~cloud1 in the trusty-juno cloud archive. To get the
fix:
sudo add-apt-repository cloud-archive:juno
sudo apt-get update
** Changed in: cloud-archive
Status: In Progress => Fix Released
--
You received this bug notification because you are a member of Ubuntu
OpenStack, which is subscribed to Ubuntu Cloud Archive.
https://bugs.launchpad.net/bugs/1347150
Title:
[SRU] switch to requests breaks HTTPS support
Status in Ubuntu Cloud Archive:
Fix Released
Status in python-glanceclient:
Fix Released
Bug description:
[Impact]
Fix glanceclient breakage in Nova when using https glance endpoint in Juno.
[Test Case]
1. Deploy Openstack juno (incl. this fix) with https endpoints and
create an instance.
2. Check that instance deployed successfully.
[Regression Potential]
None.
Since the switching to using the requests library in the client, nova
boot fails when the glance server is using SSL.
The error reported by nova is:
2014-07-22 16:20:57.569 ^[[00;32mDEBUG glanceclient.common.http [^[[01;36mreq-e9a94169-9af4-45e8-ab95-1ccd3f8caf04 ^[[00;36madmin admin^[[00;32m] ^[[01;35m^[[00;32mcurl -i -X GET -H 'X-Auth-Token: ***' -H 'Accept-Encoding: gzip, deflate, compress' -H 'Accept: */*' -H 'User-Agent: python-glanceclient' --cert None --key None https://test.example.com:9292https://moon.greyoak.com:9292//v1/images/detail?is_public=none&limit=20^[[00m ^[[00;33mfrom (pid=32459) log_curl_request /home/rcrit/redhat/openstack/python-glanceclient/glanceclient/common/http.py:103^[[00m
2014-07-22 16:20:57.571 ^[[01;31mERROR nova.api.openstack [^[[01;36mreq-e9a94169-9af4-45e8-ab95-1ccd3f8caf04 ^[[00;36madmin admin^[[01;31m] ^[[01;35m^[[01;31mCaught error: VerifiedHTTPSConnection instance has no attribute 'insecure'^[[00m
Once seen, all subsequent commands to the nova server fail similarly.
This is fairly easily reproduced with my SSL patches in
https://bugs.launchpad.net/devstack/+bug/1328226 (probably needs some
rebasing).
With an SSL-everywhere server this can be seen by installing in
devstack and doing things like:
These work.
$ nova flavor-list
$ glance image-list
$ nova net-list
Have nova hit glance:
$ nova image-list
ERROR (Unauthorized): Unauthorized (HTTP 401) (Request-ID: req-ee964e9a-c2a9-4be9-bd52-3f42c805cf2c)
All subsequent requests will fail similarly:
$ nova list
ERROR (Unauthorized): Unauthorized (HTTP 401) (Request-ID: req-f670db83-c830-4e75-b29f-44f61ae161a1)
Note that if you start nova and the first thing you do is an image-
list it works. I'm guessing this is because the only connection in the
pool is a glance connection object which has insecure defined.
To manage notifications about this bug go to:
https://bugs.launchpad.net/cloud-archive/+bug/1347150/+subscriptions
More information about the Ubuntu-openstack-bugs
mailing list