TLS everywhere deployment failed while doing curl on /etc/pki/CA/crl/overcloud-crl.bin

Solution Verified - Updated -

Issue

  • Everytime TLS everywhere deployment failed with below error:

    "Warning: tag is a metaparam; this value will inherit to all contained resources in the tripleo::firewall::rule definition", 
    "Error: /Stage[main]/Tripleo::Certmonger::Ca::Crl/Exec[tripleo-ca-crl-process-command]: Failed to call refresh: openssl crl -in /etc/pki/CA/crl/overcloud-crl.bin -inform DER -outform PEM -out /etc/pki/CA/crl/overcloud-crl.pem returned 1 instead of one of [0]", 
    "Error: /Stage[main]/Tripleo::Certmonger::Ca::Crl/Exec[tripleo-ca-crl-process-command]: openssl crl -in /etc/pki/CA/crl/overcloud-crl.bin -inform DER -outform PEM -out /etc/pki/CA/crl/overcloud-crl.pem returned 1 instead of one of [0]"
    
  • Issue is seen on every overcloud node.

Environment

Red Hat OpenStack Platform 13

Subscriber exclusive content

A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.

Current Customers and Partners

Log in for full access

Log In

New to Red Hat?

Learn more about Red Hat subscriptions

Using a Red Hat product through a public cloud?

How to access this content