Ask Your Question
0

Could not connect to instance. Retrying.: SSLError: [SSL: BAD_SIGNATURE] bad signature (_ssl.c:579)

asked 2018-11-09 09:17:09 -0600

esxzawq gravatar image

updated 2018-11-09 09:18:32 -0600

hi all

I have configured octavia, and the SSL with help of this link all are correct except SSL BAD SIGNATURE

octavia-worker log :

Could not connect to instance. Retrying.: SSLError: [SSL: BAD_SIGNATURE] bad signature (_ssl.c:579)

Can we ignore SSL and continue without them !

edit retag flag offensive close merge delete
add a comment

2 answers

Sort by ยป oldest newest most voted
0

answered 2018-11-15 18:57:44 -0600

johnsom gravatar image

This means that the server CA is mis-configured on your controllers.

[haproxy_amphora] server_ca and/or [certificates] ca_certificate is pointing to the wrong CA certificate.

I would go through the certificates document and double check your CA certificate configuration. https://review.openstack.org/#/c/613454/

Michael

edit flag offensive delete link more

Comments

@johnsom I followed the https://review.openstack.org/#/c/613454/ configuration step by step .

ca_certificate = /etc/octavia/certs/server_ca.cert.pem

server_ca = /etc/octavia/certs/server_ca.cert.pem

they are both pointing to the same CA certificate.

what about cafile in [service_auth]

esxzawq gravatar imageesxzawq ( 2018-11-16 04:28:06 -0600 )edit

@johnsom in step 14 you are concatinating to the client.cert-and-key.pem , I think it should be client.cert-key.pem

esxzawq gravatar imageesxzawq ( 2018-11-16 05:59:40 -0600 )edit
add a comment
0

answered 2018-11-13 04:14:08 -0600

wby1089 gravatar image

I guess your Octavia keys and certificates are not configured correctly. Please try to check following documents: https://docs.openstack.org/octavia/ro...

edit flag offensive delete link more
add a comment

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account.

Add Answer

Get to know Ask OpenStack

Resources for moderators

Question Tools

1 follower

subscribe to rss feed

Stats

Asked: 2018-11-09 09:17:09 -0600

Seen: 32 times

Last updated: Nov 15

Related questions

Could not connect to instance. Retrying.: SSLError: [SSL] PEM lib (_ssl.c:2554)

how to create an amphora image for octavia

Could not connect to instance. Retrying.: ... [Errno 113] No route to host. provisioning_status stays on PENDING_CREATE

octavia on multi node liberty

octavia loadbalancer ip (198.51.100.1) is given by noop_driver

openstack loadbalancer create .... give an ip address out of range of my network (198.51.100.1) !!

Octavia LBaaSv2 driver error

load balcer driver is not loaded

healthmonitor multiple pools

haproxy maxconn limit