Ask Your Question
0

Could not connect to instance. Retrying.: SSLError: [SSL: BAD_SIGNATURE] bad signature (_ssl.c:579)

asked 2018-11-09 09:17:09 -0500

esxzawq gravatar image

updated 2018-11-09 09:18:32 -0500

hi all

I have configured octavia, and the SSL with help of this link all are correct except SSL BAD SIGNATURE

octavia-worker log :

Could not connect to instance. Retrying.: SSLError: [SSL: BAD_SIGNATURE] bad signature (_ssl.c:579)

Can we ignore SSL and continue without them !

edit retag flag offensive close merge delete
add a comment

2 answers

Sort by ยป oldest newest most voted
0

answered 2018-11-15 18:57:44 -0500

johnsom gravatar image

This means that the server CA is mis-configured on your controllers.

[haproxy_amphora] server_ca and/or [certificates] ca_certificate is pointing to the wrong CA certificate.

I would go through the certificates document and double check your CA certificate configuration. https://review.openstack.org/#/c/613454/

Michael

edit flag offensive delete link more

Comments

@johnsom I followed the https://review.openstack.org/#/c/613454/ configuration step by step .

ca_certificate = /etc/octavia/certs/server_ca.cert.pem

server_ca = /etc/octavia/certs/server_ca.cert.pem

they are both pointing to the same CA certificate.

what about cafile in [service_auth]

esxzawq gravatar imageesxzawq ( 2018-11-16 04:28:06 -0500 )edit

@johnsom in step 14 you are concatinating to the client.cert-and-key.pem , I think it should be client.cert-key.pem

esxzawq gravatar imageesxzawq ( 2018-11-16 05:59:40 -0500 )edit
add a comment
0

answered 2018-11-13 04:14:08 -0500

wby1089 gravatar image

I guess your Octavia keys and certificates are not configured correctly. Please try to check following documents: https://docs.openstack.org/octavia/ro...

edit flag offensive delete link more
add a comment

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account.

Add Answer

Get to know Ask OpenStack

Resources for moderators

Question Tools

1 follower

subscribe to rss feed

Stats

Asked: 2018-11-09 09:17:09 -0500

Seen: 102 times

Last updated: Nov 15 '18

Related questions

OCTAVIA SSL ERROR

SSL BAD SIGNATURE octavia amphora

octavia SSLError : BAD SIGNATURE

Could not connect to instance. Retrying.: SSLError: [SSL] PEM lib (_ssl.c:2554)

how to create an amphora image for octavia

Octavia - instance is not reachable via the lb-mgmt-net

Could not connect to instance. Retrying.: ... [Errno 113] No route to host. provisioning_status stays on PENDING_CREATE

openstack loadbalancer create .... give an ip address out of range of my network (198.51.100.1) !!

octavia loadbalancer ip (198.51.100.1) is given by noop_driver

Octavia LBaaSv2 driver error