[Openstack-security] [Bug 1375857] Fix merged to glance (master)

OpenStack Infra 1375857 at bugs.launchpad.net
Thu Feb 12 13:54:44 UTC 2015


Reviewed:  https://review.openstack.org/145095
Committed: https://git.openstack.org/cgit/openstack/glance/commit/?id=4a78e854266e83f0a074e2447ce2837ee37393c5
Submitter: Jenkins
Branch:    master

commit 4a78e854266e83f0a074e2447ce2837ee37393c5
Author: Ian Cordasco <ian.cordasco at rackspace.com>
Date:   Mon Jan 5 17:54:03 2015 -0600

    Add swift_store_cacert to config files and docs
    
    Change I5b356170ec82d033204e22f79c862201400a0a31 introduced a new
    swift_store configuration option. Prior to accepting that, it was
    determined that we needed to add it to the relevant configuration files
    and document the option.
    
    DocImpact
    
    Closes-bug: 1375857
    Change-Id: I4cbfae3c1ac84d6c85875d34a58dd2a87ae85d6f

-- 
You received this bug notification because you are a member of OpenStack
Security Group, which is subscribed to OpenStack.
https://bugs.launchpad.net/bugs/1375857

Title:
  It's not possibile to pass the cacert to the swift store

Status in OpenStack Image Registry and Delivery Service (Glance):
  Fix Released
Status in OpenStack Glance backend store-drivers library (glance_store):
  Fix Committed

Bug description:
  The swift store device defined in the glance store doesn't allow to pass the ca cert file. When the driver creates a connection via the swift client it is not possible to pass that value. 
  That means that if we have swift running on TLS in some cases we have to set the insecure option equals to True as the client can't correctly complete the handshake as it fails on the verification of the cert.

  The fix I'd like to propose is to add a new parameter to define the ca
  cert file and pass this value when we create the connection via the
  swift client.

To manage notifications about this bug go to:
https://bugs.launchpad.net/glance/+bug/1375857/+subscriptions




More information about the Openstack-security mailing list