[Openstack-security] [Bug 1662563] Re: Tegile disabling certificate verification

Jan Zerebecki 1662563 at bugs.launchpad.net
Wed Jun 13 05:58:10 UTC 2018


https://review.openstack.org/#/c/501333/ removed this driver.

** Changed in: cinder
       Status: New => Fix Committed

-- 
You received this bug notification because you are a member of OpenStack
Security SIG, which is subscribed to OpenStack.
https://bugs.launchpad.net/bugs/1662563

Title:
  Tegile disabling certificate verification

Status in Cinder:
  Fix Committed

Bug description:
  Tegile is making reqeust calls with verify=False which disables SSL certificate checks in the following files:
  cinder/volume/drivers/tegile.py

  As suggested in this patch set
  (https://review.openstack.org/#/c/426385/), this bug is being opened
  in order to either fix the checks or add comments in the driver
  explaining why this is safe.

To manage notifications about this bug go to:
https://bugs.launchpad.net/cinder/+bug/1662563/+subscriptions




More information about the Openstack-security mailing list