The SSL certificate has expired

This topic provides troubleshooting references and steps for resolving system errors when the SSL certificate has expired.

Description

When object authentication is configured with SSL and the user is trying to run the authentication commands, the system displays the following error: 
[root@SSClusterNode3 ~]# openstack user list
ERROR: openstack SSL exception connecting to https://SSCluster:35357/v3/auth/tokens: 
[Errno 1] _ssl.c:504: error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed

Cause

The system displays this error because the SSL certificate has expired. The user may have used the same certificate earlier for keystone configuration, but now the certificate has expired.

Proposed workaround

  1. Remove the object authentication.
  2. Reconfigure the authentication with the new SSL certificate.
Note:

Do not run the mmuserauth service remove --data-access-method object --idmapdelete command during removing and reconfiguring the authentication.

Parent topic: Object issues