Bug 1334482 - neutron metadata ns proxy does not support ssl
Summary: neutron metadata ns proxy does not support ssl
Keywords:
Status: CLOSED ERRATA
Alias: None
Product: Red Hat OpenStack
Classification: Red Hat
Component: openstack-neutron
Version: 8.0 (Liberty)
Hardware: Unspecified
OS: Unspecified
high
high
Target Milestone: async
: 8.0 (Liberty)
Assignee: Assaf Muller
QA Contact: Alexander Stafeyev
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2016-05-09 18:17 UTC by david.costakos
Modified: 2020-03-26 02:53 UTC (History)
9 users (show)

Fixed In Version: openstack-neutron-7.1.1-3.el7ost
Doc Type: Bug Fix
Doc Text:
Previously, when SSL was enabled in the neutron metadata agent, the neutron metadata ns proxy would be unable to communicate to the neutron metadata agent via the Unix domain socket, and every request would result in a BadStatusLine error. This issue was resolved by disabling SSL in the local communication between the metadata agent and the metadata proxy over a Unix domain socket.
Clone Of:
Environment:
Last Closed: 2016-08-24 13:29:49 UTC
Target Upstream Version:
Embargoed:
david.costakos: needinfo-

Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
Launchpad 1514424 0 None None None 2016-05-09 18:17:07 UTC
OpenStack gerrit 297675 0 None MERGED Ensure metadata agent doesn't use SSL for UNIX socket 2020-03-26 02:52:51 UTC
Red Hat Product Errata RHBA-2016:1770 0 normal SHIPPED_LIVE openstack-neutron bug fix advisory 2016-08-24 17:29:15 UTC

Description david.costakos 2016-05-09 18:17:08 UTC 
Description of problem:
See https://bugs.launchpad.net/neutron/+bug/1514424



Version-Release number of selected component (if applicable):


How reproducible:


Steps to Reproduce:
1.
2.
3.

Actual results:


Expected results:


Additional info:
Comment 3 Assaf Muller 2016-06-07 23:26:45 UTC 
Upstream liberty backport is in progress.
Comment 4 Jeremy 2016-06-23 21:02:36 UTC 
Assaf, it looks like the upstream fix was merged 6/08, any approximate date when this would be available?
Comment 5 Assaf Muller 2016-07-22 14:13:38 UTC 
(In reply to Jeremy from comment #4)
> Assaf, it looks like the upstream fix was merged 6/08, any approximate date
> when this would be available?

It's in openstack-neutron-7.1.1.
Comment 7 Alexander Stafeyev 2016-07-27 08:53:11 UTC 
What are the steps to configure metatdata ssl pls ?
Comment 8 Alexander Stafeyev 2016-07-31 07:56:48 UTC 
Verified code existence in openstack-neutron-7.1.1-3.el7ost on my machine.
Comment 10 errata-xmlrpc 2016-08-24 13:29:49 UTC 
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://rhn.redhat.com/errata/RHBA-2016-1770.html
Note You need to log in before you can comment on or make changes to this bug.