| d1nuc0m | Hi, has anyone encountered error SSLError(524297, '[SSL] PEM lib (_ssl.c:4065)'))) with Designate and SSL? I have some floating IPs with a DNS entry, and when I try to release them Neutron complains that it can't connect to Designate because of a SSL error | 08:09 |
|---|---|---|
| d1nuc0m | Even though if I test with OpenSSL my-controller.example.com:9001 the connection is successful | 08:10 |
| johnsom | No, I have not seen this issue. What is the rest of the SSL error say about the PEMfile? | 15:38 |
| johnsom | My remote guess is you have a custom cert on the Designate API endpoint and have not configured neutron to have a proper CA certificate. | 15:41 |
| johnsom | https://docs.openstack.org/neutron/2024.1/admin/config-dns-int-ext-serv.html#configuring-openstack-networking-for-integration-with-an-external-dns-service | 15:41 |
| johnsom | See the cafile setting. | 15:41 |
| johnsom | It could also be a DNS issue and validation the "insecure" setting, but that is less likely with a PEM error. | 15:41 |
| -opendevstatus- NOTICE: Gerrit will be restarted at around 17:45 UTC to pick up some small image updates | 16:44 | |
Generated by irclog2html.py 2.17.3 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!