openstack/tripleo-common
Code Issues Proposed changes

Add openssl-perl to provide /etc/pki/CA in TLS setup

Browse Source 
This directory is no longer available in CentOS 8 with base openssl package.
Libvirt still has the default to /etc/pki/CA for some TLS settings. Lets add
openssl-perl to get /etc/pki/CA and keep defaults where possible.

Change-Id: Ib641ef5a7971a31fbe709e404e0194156ec2aa33
Related-Bug: #1821139
This commit is contained in:
Martin Schuppert 2019-03-22 09:18:59 +01:00
parent 9c8aa31ba3
commit 388a42774a
1 changed files with 4 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
container-images/tripleo_kolla_template_overrides.j2
View File

@ -216,6 +216,10 @@ RUN sed -i -r 's,^(Listen 80),#\1,' /etc/httpd/conf/httpd.conf \
{% set nova_compute_packages_append = ['openstack-nova-migration', 'openssh-server'] %}
{% set nova_libvirt_packages_append = ['openstack-nova-migration'] %}
# On RHEL7 /etc/pki/CA was part of base openssl package.
# On RHEL8 it is now in openssl-perl.
{% set nova_libvirt_packages_append = ['openssl-perl'] %}
############################ service container footers #########################
{% block aodh_api_footer %}