[Openstack-security] [openstack/python-swiftclient] SecurityImpact review request change Ib5de962f4102d57c71ad85fd81a615362ef175dc

gerrit2 at review.openstack.org gerrit2 at review.openstack.org
Wed Feb 12 12:30:02 UTC 2014


Hi, I'd like you to take a look at this patch for potential
SecurityImpact.
https://review.openstack.org/69187

Log:
commit b182112719ab87942472e44aa3446ea0eb19a289
Author: Tristan Cacqueray <tristan.cacqueray at enovance.com>
Date:   Fri Jan 24 17:40:16 2014 +0100

    Port to python-requests
    
    Currently, httplib implementation does not support SSL certificate
    verification. This patch fixes this. Note that ssl compression parameter
    and 100-continue thing is still missing from requests, though those are
    lower priority.
    
    Requests now takes care of:
    * proxy configuration (get_environ_proxies),
    * chunked encoding (with data generator),
    * bulk uploading (with files dictionary),
    * SSL certificate verification (with 'insecure' and 'cacert' parameter).
    
    This patch have been tested with requests 1.1.0 (CentOS 6) and requests
    2.2.1 (current version).
    
    Change-Id: Ib5de962f4102d57c71ad85fd81a615362ef175dc
    Closes-Bug: #1199783
    DocImpact
    SecurityImpact





More information about the Openstack-security mailing list