Hi, All:
I've deployed an undercloud baremetal with tripleO devtest. But
when I was trying to add endpoints to keystone and use other services like
nova and glance, it always has certificate error.* I can not use any
service except keystone in undercloud machine when I source undercloudrc.*
Please help me .
It always has “*Verify error: Command 'openssl' returned non-zero
exit status 4*”.
I save the token in one file, and run "*sudo openssl cms -verify
-certfile /tmp/keystone-signing-R8K0yX/**signing_cert.pem -CAfile
/tmp/keystone-signing-R8K0yX/**cacert.pem -inform PEM -nosmimecap -nodetach
-nocerts -noattr -in token.txt*”, it reports error “*Verification failure*
*3074320060:error:2E099064:CMS
routines:CMS_SIGNERINFO_VERIFY_CERT:certificate verify
error:cms_smime.c:304:Verify error:certificate is not yet valid*"
Below are error logs:
2010-08-28 04:04:25.738 16927 DEBUG keystonemiddleware.auth_token [-]
Server reports support for api versions: v3.0, v2.0 _get_supported_versions
/opt/stack/venvs/openstack/local/lib/python2.7/site-packages/keystonemiddleware/auth_token.py:1253
2010-08-28 04:04:25.738 16927 INFO keystonemiddleware.auth_token [-] Auth
Token confirmed use of v3.0 apis
2010-08-28 04:04:25.748 16927 DEBUG keystonemiddleware.auth_token [-]
data(-----BEGIN CMS-----
MIIBygYJKoZIhvcNAQcCoIIBuzCCAbcCAQExDTALBglghkgBZQMEAgEwHgYJKoZI
hvcNAQcBoBEED3sicmV2b2tlZCI6IFtdfTGCAYEwggF9AgEBMFgwUzELMAkGA1UE
BhMCWFgxDjAMBgNVBAgTBVVuc2V0MQ4wDAYDVQQHEwVVbnNldDEOMAwGA1UEChMF
VW5zZXQxFDASBgNVBAMTC0tleXN0b25lIENBAgECMAsGCWCGSAFlAwQCATANBgkq
hkiG9w0BAQEFAASCAQB2lxoXMw1l8DBRUxxD9iLep85XrJMnHspEE94GEUnZkaH1
FkGWUqdCVSXcsvVcuWcQKb9ZjMwGnBeTYNeqc66Fezy4Sg2HSbXjne7uk4giGIe+
7fOeGVl25q05zjUmwrUzZRKv4vpLaQxZctxSGSRXNrDdmRcrC02YFVm6/Mghpvtx
4SjWk5EWrq+/ZxQ2sFxjYVSREF6YjpPf+PcS6Hh9ieBpUH2GGm+kr4/KdIyyrHlm
SRItYmsxE3fF1n2N23bQQULkdNotRzj8fIYJLEno7XWqvMxqQKUTyQBTlfVTfpo5
kumS9+5On4Gx2vc2ZLQEjQT0lEOxyaV4ze3+3Fc2
-----END CMS-----
) verify
/opt/stack/venvs/openstack/local/lib/python2.7/site-packages/keystonemiddleware/auth_token.py:867
2010-08-28 04:04:25.749 16927 DEBUG keystonemiddleware.auth_token [-]
_signing_cert_file_name(/tmp/keystone-signing-TASGp3/signing_cert.pem)
verify
/opt/stack/venvs/openstack/local/lib/python2.7/site-packages/keystonemiddleware/auth_token.py:868
2010-08-28 04:04:25.749 16927 DEBUG keystonemiddleware.auth_token [-]
_signing_ca_file_name(/tmp/keystone-signing-TASGp3/cacert.pem) verify
/opt/stack/venvs/openstack/local/lib/python2.7/site-packages/keystonemiddleware/auth_token.py:869
2010-08-28 04:04:25.755 16927 WARNING keystonemiddleware.auth_token [-]
Verify error: Command 'openssl' returned non-zero exit status 4
2010-08-28 04:04:25.755 16927 DEBUG keystonemiddleware.auth_token [-] Token
validation failure. _validate_user_token
/opt/stack/venvs/openstack/local/lib/python2.7/site-packages/keystonemiddleware/auth_token.py:687
2010-08-28 04:04:25.755 16927 TRACE keystonemiddleware.auth_token Traceback
(most recent call last):
2010-08-28 04:04:25.755 16927 TRACE keystonemiddleware.auth_token File
"/opt/stack/venvs/openstack/local/lib/python2.7/site-packages/keystonemiddleware/auth_token.py",
line 671, in _validate_user_token
2010-08-28 04:04:25.755 16927 TRACE keystonemiddleware.auth_token
verified = self._verify_pkiz_token(user_token, token_ids)
2010-08-28 04:04:25.755 16927 TRACE keystonemiddleware.auth_token File
"/opt/stack/venvs/openstack/local/lib/python2.7/site-packages/keystonemiddleware/auth_token.py",
line 905, in _verify_pkiz_token
2010-08-28 04:04:25.755 16927 TRACE keystonemiddleware.auth_token if
self._is_signed_token_revoked(token_ids):
2010-08-28 04:04:25.755 16927 TRACE keystonemiddleware.auth_token File
"/opt/stack/venvs/openstack/local/lib/python2.7/site-packages/keystonemiddleware/auth_token.py",
line 845, in _is_signed_token_revoked
2010-08-28 04:04:25.755 16927 TRACE keystonemiddleware.auth_token if
self._is_token_id_in_revoked_list(token_id):
2010-08-28 04:04:25.755 16927 TRACE keystonemiddleware.auth_token File
"/opt/stack/venvs/openstack/local/lib/python2.7/site-packages/keystonemiddleware/auth_token.py",
line 852, in _is_token_id_in_revoked_list
2010-08-28 04:04:25.755 16927 TRACE keystonemiddleware.auth_token
revocation_list = self._token_revocation_list
2010-08-28 04:04:25.755 16927 TRACE keystonemiddleware.auth_token File
"/opt/stack/venvs/openstack/local/lib/python2.7/site-packages/keystonemiddleware/auth_token.py",
line 963, in _token_revocation_list
2010-08-28 04:04:25.755 16927 TRACE keystonemiddleware.auth_token
self._token_revocation_list = self._fetch_revocation_list()
2010-08-28 04:04:25.755 16927 TRACE keystonemiddleware.auth_token File
"/opt/stack/venvs/openstack/local/lib/python2.7/site-packages/keystonemiddleware/auth_token.py",
line 997, in _fetch_revocation_list
2010-08-28 04:04:25.755 16927 TRACE keystonemiddleware.auth_token
return self._cms_verify(revocation_list_data)
2010-08-28 04:04:25.755 16927 TRACE keystonemiddleware.auth_token File
"/opt/stack/venvs/openstack/local/lib/python2.7/site-packages/keystonemiddleware/auth_token.py",
line 888, in _cms_verify
2010-08-28 04:04:25.755 16927 TRACE keystonemiddleware.auth_token
return verify()
2010-08-28 04:04:25.755 16927 TRACE keystonemiddleware.auth_token File
"/opt/stack/venvs/openstack/local/lib/python2.7/site-packages/keystonemiddleware/auth_token.py",
line 874, in verify
2010-08-28 04:04:25.755 16927 TRACE keystonemiddleware.auth_token
inform=inform).decode('utf-8')
2010-08-28 04:04:25.755 16927 TRACE keystonemiddleware.auth_token File
"/opt/stack/venvs/openstack/local/lib/python2.7/site-packages/keystoneclient/common/cms.py",
line 178, in cms_verify
2010-08-28 04:04:25.755 16927 TRACE keystonemiddleware.auth_token raise
e
2010-08-28 04:04:25.755 16927 TRACE keystonemiddleware.auth_token
CalledProcessError: Command 'openssl' returned non-zero exit status 4
2010-08-28 04:04:25.755 16927 TRACE keystonemiddleware.auth_token
2010-08-28 04:04:25.757 16927 DEBUG keystonemiddleware.auth_token [-]
Marking token as unauthorized in cache store_invalid
/opt/stack/venvs/openstack/local/lib/python2.7/site-packages/keystonemiddleware/auth_token.py:1501
2010-08-28 04:04:25.757 16927 WARNING keystonemiddleware.auth_token [-]
Authorization failed for token
2010-08-28 04:04:25.757 16927 INFO keystonemiddleware.auth_token [-]
Invalid user token - deferring reject downstream
*Best Regards！*
*Chao Yan--------------**My twitter：Andy Yan @yanchao727
<https://twitter.com/yanchao727>*
*My Weibo：http://weibo.com/herewearenow
<http://weibo.com/herewearenow>--------------*
_______________________________________________
Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
Post to : openstack@lists.openstack.org
Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
