Red Hat Bugzilla – Bug 1255468
ahc-tools does not support self-signed certificates
Last modified: 2016-04-18 02:51:56 EDT
Description of problem: ahc-tools doesn't allow specifying an os-cacert parameter to its ironic client, which means it can't work with a self-signed certificate. Version-Release number of selected component (if applicable): 0.1.1-5.el7ost (I think) How reproducible: Always Steps to Reproduce: 1. Install undercloud with ssl for service endpoints, using a self-signed certificate 2. Attempt to run ahc-report --full 3. Actual results: ironicclient.openstack.common.apiclient.exceptions.ConnectionRefused: Error communicating with https://192.168.85.6:13385/ [Errno 1] _ssl.c:504: error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed Expected results: ahc-report --full output Additional info:
Actually, I take that back. I see this is using the discoverd configuration as a basis, which means we just need to be able to configure ahc-tools to talk to the internal ironic endpoint instead of public. That's how we addressed the issue in discoverd so it should work fine here too.
@Ben, I think this will be resolved with the same fix as https://bugzilla.redhat.com/show_bug.cgi?id=1245212 WDYT?
Agreed, this is actually a dupe of that bug.
*** This bug has been marked as a duplicate of bug 1245212 ***