** Description changed: - In a private openstack cloud setup, using self-signed certs, juju fails - to bootstrap even with ssl-hostname-verification configured as true. - This appears to be because loading the provider-state date from swift - during cloud-init setup on machine 0 fails due to the swift endpoint not - having a valid certificate: + [Impact] + Users of private cloud deployments with self-signed SSL certs can't use Juju + + [Test Case] + #Requires cloud with swift storage using self-signed cert + juju bootstrap --debug + #fail + + [Regression Potential] + Minimal code change in direct path only. + + [Original Bug Report] + In a private openstack cloud setup, using self-signed certs, juju fails to bootstrap even with ssl-hostname-verification configured as true. This appears to be because loading the provider-state date from swift during cloud-init setup on machine 0 fails due to the swift endpoint not having a valid certificate: + echo https://10.1.27.194:8080/v1/AUTH_74406d06ca654bf4804003942b2f3f7c/juju-3a596bb8224878b427a7728fd83b7886/provider-state + /var/lib/juju/tools/1.16.5-precise-amd64/jujud bootstrap-state --data-dir /var/lib/juju --env-config ... --constraints mem=1024M --debug 2014-01-13 07:05:33 DEBUG juju.agent agent.go:237 Reading agent config, format: format 1.16 2014-01-13 07:05:33 DEBUG juju.agent agent.go:464 initializing address [localhost:37017] 2014-01-13 07:05:33 INFO juju.state open.go:68 opening state; mongo addresses: ["localhost:37017"]; entity "" 2014-01-13 07:05:33 INFO juju.state open.go:106 connection established 2014-01-13 07:05:34 INFO juju.state open.go:136 initializing environment 2014-01-13 07:05:35 DEBUG juju.agent agent.go:474 state initialized 2014-01-13 07:05:35 DEBUG juju.agent agent.go:486 adding admin user 2014-01-13 07:05:37 DEBUG juju.agent agent.go:497 setting password hash for admin user 2014-01-13 07:05:39 ERROR juju supercommand.go:282 cannot load state from URL "https://10.1.27.194:8080/v1/AUTH_74406d06ca654bf4804003942b2f3f7c/juju-3a596bb8224878b427a7728fd83b7886/provider-state"; (read from "/tmp/provider-state-url"): Get https://10.1.27.194:8080/v1/AUTH_74406d06ca654bf4804003942b2f3f7c/juju-3a596bb8224878b427a7728fd83b7886/provider-state: x509: certificate signed by unknown authority failed: /var/lib/cloud/instance/scripts/runcmd [1]
-- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to juju-core in Ubuntu. https://bugs.launchpad.net/bugs/1268913 Title: Loading state on bootstrap ignores ssl-hostname-verification setting To manage notifications about this bug go to: https://bugs.launchpad.net/juju-core/+bug/1268913/+subscriptions -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
