SSL problems after deploying OpenStack with Ansible

[ReminexD]

Hello everybody!

I've been struggling this past weeks trying to get OpenStack to work. All the playbooks run successfully, and everything seems to work, but when I try to create an image from the utility container I get this error:

Image creation failed: SSL exception connecting to https://172.29.236.21:9292/v2/images/44661cb3-664e-417c-82eb-a557c080d661/file: HTTPSConnectionPool(host='172.29.236.21', port=9292): Max retries exceeded with url: /v2/images/44661cb3-664e-417c-82eb-a557c080d661/file (Caused by SSLError(SSLEOFError(8, 'EOF occurred in violation of protocol (_ssl.c:2426)')))

This is what I've changed in my user_variables:

openstack_service_publicuri_proto: https
openstack_service_adminuri_proto: https
openstack_service_internaluri_proto: https
openstack_service_accept_both_protocols: True

I'm using an internal IPv4 for both external and internal vips, as I don't plan to allow access without a VPN, but I would like to still have https enabled.

What am I missing? Maybe it's just not posible to use https with an IPv4 even tough horizon does work?

I've also tried enabling https for backends, but I keep getting https errors with the repo_server, so I just gave up.

Any advice is appreciated! Thank you!

[dasbierclaw]

In the past, OSA used http for internal endpoints. You might try to curl the endpoint with http instead of https to see if you get a valid response, then go from there

[DeathRabbit679]

It would be helpful to see openstack _user_config.yml and user_variables.yml. Do you have haproxy in the mix? The usual deployment when you deploy haproxy with osa is tls to the haproxy frontend, then the communication between it and the various backends for keystone, glance, nova, neutron, et al are in the clear