Python 3.13 enables VERIFY_X509_STRICT by default in SSL contexts, which enforces RFC 5280 compliance for X.509 certificates. This caused TLS handshake failures between octavia-worker and amphorae because the locally generated certificates were missing the Subject Key Identifier (SKI) and Authority Key Identifier (AKI) extensions. This change adds both extensions to certificates generated by the local certificate generator, ensuring compatibility with Python 3.13+ and OpenSSL strict verification mode. Closes-Bug: #2146740 Change-Id: I4fd6b76a8856fff82c5e37b279f5991ecd436ab3 Co-Authored-By: Claude Opus 4.5 <[email protected]> Signed-off-by: Gregory Thiemonge <[email protected]>
Octavia
Octavia is an operator-grade open source scalable load balancer for use in large OpenStack deployments.
Octavia provides the load balancing API for OpenStack. It supports multiple "provider drivers" that implement load balancing, including the "amphora" reference driver included with Octavia.
Octavia is distributed under the terms of the Apache License, Version 2.0. The full terms and conditions of this license are detailed in the LICENSE file.
Project resources
Developer documentation for the Octavia project is available at https://docs.openstack.org/octavia/latest/
Release notes for the Octavia project are available at https://docs.openstack.org/releasenotes/octavia/
The project source code repository is located at https://opendev.org/openstack/octavia
Project status, bugs, and requests for feature enhancements are tracked on https://launchpad.net/octavia
For more information on project direction and guiding principles for contributors, please see the CONSTITUTION.rst file in this directory, or specifications in the specs/ sub-directory.
The project roadmap is available at https://wiki.openstack.org/wiki/Octavia/Roadmap
External Resources
- Octavia Wiki: https://wiki.openstack.org/wiki/Octavia
- For help on usage and hacking of Octavia, please send an email to OpenStack-dev Mailing List <mailto:[email protected]> with [Octavia] tag.