[Openstack-security] [Bug 1201534] Re: heat.common.urlfetch does not validate server SSL certificates

OpenStack Hudson 1201534 at bugs.launchpad.net
Thu Jul 25 00:59:18 UTC 2013


Reviewed:  https://review.openstack.org/38403
Committed: http://github.com/openstack/heat/commit/50e177e3c9c207ff832aac6adcafcf81a181a145
Submitter: Jenkins
Branch:    master

commit 50e177e3c9c207ff832aac6adcafcf81a181a145
Author: Davanum Srinivas <dims at linux.vnet.ibm.com>
Date:   Tue Jul 23 22:08:20 2013 -0400

    Replace urllib2 with requests in urlfetch module
    
    simple replacement of urllib2.urlopen with requests.get
    
    Fixes LP# 1201534
    
    Change-Id: Ia0a2ed3b092e22246339a42f432086dd05f788fa


** Changed in: heat
       Status: In Progress => Fix Committed

-- 
You received this bug notification because you are a member of OpenStack
Security Group, which is subscribed to OpenStack.
https://bugs.launchpad.net/bugs/1201534

Title:
  heat.common.urlfetch does not validate server SSL certificates

Status in Orchestration API (Heat):
  Fix Committed

Bug description:
  urllib2 is not considered "safe" for SSL communications. It does
  nothing to validate the server SSL certificate.

  We should migrate to requests, which has become common in OpenStack.

To manage notifications about this bug go to:
https://bugs.launchpad.net/heat/+bug/1201534/+subscriptions




More information about the Openstack-security mailing list