RDO tickets are now tracked in Jira https://issues.redhat.com/projects/RDO/issues/
Bug 1026086 - rerunning packstack will generate a new ssl file for horizon
Summary: rerunning packstack will generate a new ssl file for horizon
Keywords:
Status: CLOSED NOTABUG
Alias: None
Product: RDO
Classification: Community
Component: openstack-packstack
Version: unspecified
Hardware: Unspecified
OS: Unspecified
unspecified
unspecified
Target Milestone: ---
: ---
Assignee: Ivan Chavero
QA Contact: Nir Magnezi
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2013-11-03 14:47 UTC by Mohammed Arafa
Modified: 2014-01-15 07:25 UTC (History)
4 users (show)

Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Clone Of:
Environment:
Last Closed: 2014-01-15 07:25:55 UTC
Embargoed:


Attachments (Terms of Use)

Description Mohammed Arafa 2013-11-03 14:47:43 UTC
Description of problem:
rerunning packstack will generate a new ssl file for horizon

i did this first
sed -i 's/CONFIG_HORIZON_SSL=n/CONFIG_HORIZON_SSL=y/g' packstack.answer
 then ran packstack

i then logged into the horizon dashboard and accepted the ssl file

later i decided to enable the demo user and add in the cirros image so i modifed the answer file and re ran packstack

i then logged into the horizon dashboard and accepted the _NEW_ ssl file

so thinking ahead one year from now, we _will_ need to generate a new ssl file so maybe a config option like "generate new ssl file for horizon =y" should be included ?

Version-Release number of selected component (if applicable):


How reproducible:


Steps to Reproduce:
1.
2.
3.

Actual results:


Expected results:


Additional info:

Comment 1 Ivan Chavero 2014-01-15 07:25:55 UTC
Packstack generates self signed SSL certificates, this certificates are just for testing and they are not suppoused to be used in production. If you need a long term certificate you should get a verified certficate from verisign or create your CA and sign your certificates. And then add them to packstack answer file.


Note You need to log in before you can comment on or make changes to this bug.