<html>
<head>
<meta content="text/html; charset=ISO-8859-1"
http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<br>
-----BEGIN PGP SIGNED MESSAGE-----<br>
Hash: SHA1<br>
<br>
Hi Paolo,<br>
<br>
Excellent, glad that fixed it for you.<br>
<br>
Concerning StarCluster versions, there's no need to uninstall
StarCluster 0.92, simply running "easy_install StarCluster" should
install and use the new version.<br>
<br>
In case you're interested, here's a little background on the boto
https certificate validation problem:<br>
<br>
In reality https_validate_certificates *should* be True by default
(even without a boto user config) for improved security, however,
certificate validation in boto isn't as robust as it needs to be at
the moment (see
<a class="moz-txt-link-freetext" href="https://github.com/boto/boto/pull/378#issuecomment-2511847">https://github.com/boto/boto/pull/378#issuecomment-2511847</a>). This is
why boto upstream has it set to False by default in order to avoid
those issues for now. To make matters worse, the cacerts.txt file
needed for validation was also left out of the boto 2.0 release by
accident which is directly causing the error you encountered. This
file has been restored in the latest 2.1.1 version of boto, however,
I just tested and certificate validation still fails:<br>
<br>
InvalidCertificateException: Host ec2.amazonaws.com returned an
invalid certificate (remote hostname "ec2.amazonaws.com" does not
match certificate): {'notAfter': 'Oct 7 23:59:59 2013 GMT',
'subject': ((('countryName', u'US'),), (('stateOrProvinceName',
u'Washington'),), (('localityName', u'Seattle'),),
(('organizationName', u'Amazon.com Inc.'),), (('commonName',
u'ec2.us-east-1.amazonaws.com'),))<br>
<br>
According to
<a class="moz-txt-link-freetext" href="https://github.com/mbr/boto/commit/243f7184ce63670239c243d5db64c9782a67c0d0">https://github.com/mbr/boto/commit/243f7184ce63670239c243d5db64c9782a67c0d0</a>
this is due to:<br>
<br>
"Note: Currently, there is an issue connecting to EC2 services using<br>
boto with host name verification enabled. The client connecting will
be<br>
redirect, for example from ec2.amazonaws.com to<br>
ec2.us-east-1.amazonaws.com. The python SSL library does not seem to<br>
support the X509v3 Subject Alternative Name fields (even though the<br>
documentation mentions a subjectAltName, this seems to be not of the<br>
x509v3 kind) - verification with the openssl s_client shows that<br>
ec2.us-east-1.amazonaws.com is indeed mentioned on the certificate.<br>
<br>
The only solution at the moment seems to be trying to connect to the<br>
host directly where the hostname is presented as the commonName.
This<br>
patch hopefully will tip more people in the right direction when
they<br>
are looking for errors."<br>
<br>
<br>
~Justin<br>
<br>
On 11/6/11 11:59 AM, Paolo Di Tommaso wrote:<br>
<span style="white-space: pre;">> Hi Justin, <br>
><br>
> Bingo! you are right. I've changed
https_validate_certificates to false in the ~/boto file and now it
is working! Thanks. <br>
><br>
> About the StarCluster version, I had the 0.92 release
installed on my machine before install the latest one. <br>
><br>
> Do you suggest to remove it before installing the 0.92.1
version? Is there a procedure to uninstall StarCluster? I haven't
found it. <br>
><br>
><br>
> <br>
><br>
><br>
> Cheers,<br>
> Paolo<br>
><br>
><br>
><br>
><br>
> On Nov 6, 2011, at 5:41 PM, Justin Riley wrote:<br>
><br>
>> Hi Paolo,<br>
>><br>
>> I'm having trouble reproducing this issue on Mac OSX
10.6.8 using a<br>
>> fresh virtual environment on Python 2.7.1. I noticed the
screen output<br>
>> you sent is for the latest 0.92.1 version, however, the
crash reports<br>
>> you sent are from version 0.92. Do you have the same
issue with both<br>
>> 0.92.1 and 0.92 versions on OSX Lion?<br>
>><br>
>> Also, after a bit of research this error usually occurs
if you have<br>
>> https certificate validation enabled. Looking at the code
for boto 2.0<br>
>> (the current version of boto that StarCluster uses) it
appears this can<br>
>> *only* be enabled using a boto config file as far as I
can tell<br>
>> although I could be wrong.<br>
>><br>
>> Do you by chance have either /etc/boto.cfg or $HOME/.boto
config files<br>
>> on your mac?<br>
>><br>
>> ~Justin<br>
>><br>
>> On Sun Nov 6 06:54:28 2011, Paolo Di Tommaso wrote:<br>
>>> Hi Justin, Thanks for that.<br>
>>><br>
>>> I've installed it on Mac OSX Lion (10.7.2) but I get
the following<br>
>>> error on start and listclusters (the only ones I've
tried)<br>
>>><br>
>>> $ starcluster start -c basic 2node<br>
>>> StarCluster - (<a class="moz-txt-link-freetext" href="http://web.mit.edu/starcluster">http://web.mit.edu/starcluster</a>) (v.
0.92.1)<br>
>>> Software Tools for Academics and Researchers (STAR)<br>
>>> Please submit bug reports to <a class="moz-txt-link-abbreviated" href="mailto:starcluster@mit.edu">starcluster@mit.edu</a><br>
>>> <a class="moz-txt-link-rfc2396E" href="mailto:starcluster@mit.edu"><mailto:starcluster@mit.edu></a><br>
>>><br>
>>> !!! ERROR - Unable to connect: [Errno 185090050]
_ssl.c:336:<br>
>>> error:0B084002:x509 certificate<br>
>>> routines:X509_load_cert_crl_<a class="moz-txt-link-freetext" href="file:system">file:system</a> lib<br>
>>> !!! ERROR - Check your internet connection?<br>
>>><br>
>>><br>
>>> I've attached the crash reports.<br>
>>><br>
>>><br>
>>> Thank,<br>
>>> Paolo<br>
>>><br>
>><br>
>><br>
>> _______________________________________________<br>
>> StarCluster mailing list<br>
>> <a class="moz-txt-link-abbreviated" href="mailto:StarCluster@mit.edu">StarCluster@mit.edu</a><br>
>> <a class="moz-txt-link-freetext" href="http://mailman.mit.edu/mailman/listinfo/starcluster">http://mailman.mit.edu/mailman/listinfo/starcluster</a><br>
></span><br>
<br>
-----BEGIN PGP SIGNATURE-----<br>
Version: GnuPG v1.4.11 (Darwin)<br>
Comment: Using GnuPG with Mozilla - <a class="moz-txt-link-freetext" href="http://enigmail.mozdev.org/">http://enigmail.mozdev.org/</a><br>
<br>
iEYEARECAAYFAk62xRwACgkQ4llAkMfDcrlCHACeIR0JUUYHuGKx0PmXeHDblbEK<br>
FpgAn3pPOtoPEdNUVipbmYB3iwqkbkGg<br>
=BDg6<br>
-----END PGP SIGNATURE-----<br>
<br>
</body>
</html>