Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Generating SSL certs fails with IPv6 addresses in undercloud.conf #394

Open
AlistairTonner opened this issue Jul 30, 2020 · 0 comments
Open

Comments

@AlistairTonner
Copy link

when undercloud.conf is populated with an IPv6 address for undercloud_admin_host the notation includes the cidr for the address.

and related stanza do not trim off the cidr, and the cird then causes the openssl call to fail with "Hit end of string before finding the equals". The task needs to validate that there is no /### at the end of the string before passing it to the openssl command.

TASK [create the self signed CA certificate] ***********************************
task path: /home/rhos-ci/jenkins/workspace/OSPD-Customized-Deployment-virt/infrared/plugins/tripleo-undercloud/tasks/ssl.yml:38
Thursday 30 July 2020 17:50:23 +0000 (0:00:00.834) 0:12:27.690 *********
fatal: [undercloud-0]: FAILED! => {
"changed": true,
"cmd": [
"openssl",
"req",
"-new",
"-x509",
"-days",
"365",
"-key",
"undercloud-privkey.pem",
"-subj",
"/C=US/ST=NC/L=Raleigh/O=Red HAt/OU=QE/CN=fe32:dead:beef::2/64",
"-out",
"/etc/pki/ca-trust/source/anchors/undercloud-cacert.pem"
],
"delta": "0:00:00.004445",
"end": "2020-07-30 13:50:24.440774",
"rc": 1,
"start": "2020-07-30 13:50:24.436329"
}

STDERR:

req: Hit end of string before finding the equals.
problems making Certificate Request

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant