@@ -227,9 +227,13 @@ function init_CA {

 function init_cert {

     if [[ ! -r $DEVSTACK_CERT ]]; then

         if [[ -n "$TLS_IP" ]]; then

-            # Lie to let incomplete match routines work

-            # see https://bugs.python.org/issue23239

-            TLS_IP="DNS:$TLS_IP,IP:$TLS_IP"

+            if python3_enabled; then

+                TLS_IP="IP:$TLS_IP"

+            else

+                # Lie to let incomplete match routines work with python2

+                # see https://bugs.python.org/issue23239

+                TLS_IP="DNS:$TLS_IP,IP:$TLS_IP"

+            fi

         fi

         make_cert $INT_CA_DIR $DEVSTACK_CERT_NAME $DEVSTACK_HOSTNAME "$TLS_IP"