[Openstack-security] [Bug 1662561] Re: Solidfire disabling certificate verification

John Griffith 1662561 at bugs.launchpad.net
Thu Mar 2 21:24:35 UTC 2017


No current plans to change this, but thanks for logging the bug and we
should keep it tracked here.

** Changed in: cinder
       Status: New => Triaged

** Changed in: cinder
   Importance: Undecided => Wishlist

-- 
You received this bug notification because you are a member of OpenStack
Security, which is subscribed to OpenStack.
https://bugs.launchpad.net/bugs/1662561

Title:
  Solidfire disabling certificate verification

Status in Cinder:
  Triaged

Bug description:
  Solidfire is making reqeust calls with verify=False which disables SSL certificate checks in the following files:
  cinder/volume/drivers/solidfire.py

  As suggested in this patch set
  (https://review.openstack.org/#/c/426385/), this bug is being opened
  in order to either fix the checks or add comments in the driver
  explaining why this is safe.

To manage notifications about this bug go to:
https://bugs.launchpad.net/cinder/+bug/1662561/+subscriptions




More information about the Openstack-security mailing list