Could not connect to instance. Retrying.: SSLError: [SSL: BAD_SIGNATURE] bad signature (_ssl.c:579)

I guess your Octavia keys and certificates are not configured correctly. Please try to check following documents: https://docs.openstack.org/octavia/ro...

0

johnsom
186 ●2 ●4

This means that the server CA is mis-configured on your controllers.

[haproxy_amphora] server_ca and/or [certificates] ca_certificate is pointing to the wrong CA certificate.

I would go through the certificates document and double check your CA certificate configuration. https://review.openstack.org/#/c/613454/

Michael

Comments

ca_certificate = /etc/octavia/certs/server_ca.cert.pem

server_ca = /etc/octavia/certs/server_ca.cert.pem

they are both pointing to the same CA certificate.

what about cafile in [service_auth]

esxzawq ( 2018-11-16 04:28:06 -0600 )edit

@johnsom in step 14 you are concatinating to the client.cert-and-key.pem , I think it should be client.cert-key.pem

esxzawq ( 2018-11-16 05:59:40 -0600 )edit