Hello All - Happy 2015.
I have been successful in establishing communication using --insecure option. I
have two problems here.
1. swift calls without --insecure option continues to fail. Not sure why?
2. ceph gateway logs has the following error logs. Any thoughts on why I am
seeing this error? Please note that I do have converted keystone certs copied
in /var/ceph/nss directory.
2015-01-13 18:19:38.258956 7f54e17fa700 20 sending request to
https://192.0.2.26:5000/v2.0/tokens/revoked
2015-01-13 18:19:38.433790 7f54e17fa700 10 request returned {"signed":
"-----BEGIN
CMS-----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\nQ4gqk47zO2AqgDUTiDmgpD7g7vmj7BNJtKs8KiNK\n-----END
CMS-----\n"}2015-01-13 18:19:38.435725 7f54e17fa700 10 signed=-----BEGIN
CMS-----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-----END
CMS-----
2015-01-13 18:19:38.438107 7f54e17fa700 10
content=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-01-13
18:19:38.439062 7f54e17fa700 0 ERROR: signer 0 status =
SigningCertNotFound2015-01-13 18:19:38.439492 7f54e17fa700 0 ERROR: problem
decoding2015-01-13 18:19:38.439548 7f54e17fa700 0 ceph_decode_cms returned
-222015-01-13 18:19:38.439608 7f54e17fa700 0 ERROR: keystone revocation
processing returned error r=-22
On Friday, December 5, 2014 10:41 AM, lakshmi k s <lux...@yahoo.com> wrote:
Hello -
I have rados gateway setup working with http. But when I enable SSL on gateway
node, I am having trouble making successful swift requests over https.
root@hrados:~# swift -V 1.0 -A https://hrados1.ex.com/auth/v1.0 -U
s3User:swiftUser -K 8fJfd6YW2poqhvBI+uUYJZE1uscnmrDncRXrkjHR list[Errno bad
handshake] [('SSL routines', 'SSL3_GET_SERVER_CERTIFICATE', 'certificate verify
failed')]
Output of CURL command is as follows. root@hrados:~# curl --insecure -X GET -i
-H "X-Auth-Key:8fJfd6YW2poqhvBI+uUYJZE1uscnmrDncRXrkjHR" -H
"X-Auth-User:s3User:swiftUser" https://hrados1.ex.com/auth/v1.0HTTP/1.1 204 No
ContentDate: Fri, 05 Dec 2014 17:53:58 GMTServer: Apache/2.4.10
(Debian)X-Storage-Url: https://hrados1.ex.com/swift/v1X-Storage-Token:
AUTH_rgwtk100000007333557365723a737769667455736572961633914ab868f0b6428354483a6b08fc254e33b1283ed9f428c61436aa05c0f44069d8X-Auth-Token:
AUTH_rgwtk100000007333557365723a737769667455736572961633914ab868f0b6428354483a6b08fc254e33b1283ed9f428c61436aa05c0f44069d8Content-Type:
application/json
Appreciate your help.Thanks,Lakshmi.
_______________________________________________
ceph-users mailing list
ceph-users@lists.ceph.com
http://lists.ceph.com/listinfo.cgi/ceph-users-ceph.com
