Cloudify 3.3 - Openstack:SSL3_GET_SERVER_CERTIFICATE:certificate验证失败

Question

我试图使用HTTPS连接使用Keystone在OpenStack中创建一个Cloudify Manager。

当我执行命令时：

cfy引导--安装插件-p /path/to/manager/ -i /-i/path/to/input/yaml/file

我收到以下错误：

引发exceptions.SslCertificateValidationError(reason=e) SslCertificateValidationError: SSL证书验证失败: Errno 1 _ssl.c:504：_ssl.c:504: 14090086: SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate验证失败2016-01-29 :50:58 CFY external_network_5bbde.creation Task failed 'neutron_plugin.network.creation_validation‘-> SSL证书验证失败: Errno 1_ssl.c:504:错误:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate验证失败尝试1/6

我该怎么做才能解决这个问题？

Answer 1

您似乎对keystone SSL证书有问题。

您应该将证书导入CLI机器。

或者您可以在引导之前尝试运行：

export CLOUDIFY_SSL_TRUST_ALL=true; 

Answer 2

我解决了在dsl_definition中插入OpenStack蓝图的问题：

dsl_definitions: 
 openstack_configuration: &openstack_configuration
  username: { get_input: keystone_username }
  password: { get_input: keystone_password }
  tenant_name: { get_input: keystone_tenant_name }
  auth_url: { get_input: keystone_url }
  region: { get_input: region }
  nova_url: { get_input: nova_url }
  neutron_url: { get_input: neutron_url }

声明如下：

custom_configuration:
 nova_client:
  insecure: true
 keystone_client:
  insecure: true
 neutron_client:
  insecure: true
 cinder_client:
  insecure: true

最后的结果是：

dsl_definitions:
 openstack_configuration: &openstack_configuration
  username: { get_input: keystone_username }
  password: { get_input: keystone_password }
  tenant_name: { get_input: keystone_tenant_name }
  auth_url: { get_input: keystone_url }
  region: { get_input: region }
  nova_url: { get_input: nova_url }
  neutron_url: { get_input: neutron_url }
  custom_configuration:
   nova_client:
    insecure: true
   keystone_client:
    insecure: true
   neutron_client:
    insecure: true
   cinder_client:
    insecure: true