[Openstack-security] [Bug 1662563] [NEW] Tegile disabling certificate verification
Rohan Arora
1662563 at bugs.launchpad.net
Tue Feb 7 15:51:08 UTC 2017
Public bug reported:
Tegile is making reqeust calls with verify=False which disables SSL certificate checks in the following files:
cinder/volume/drivers/tegile.py
As suggested in this patch set
(https://review.openstack.org/#/c/426385/), this bug is being opened in
order to either fix the checks or add comments in the driver explaining
why this is safe.
** Affects: cinder
Importance: Undecided
Status: New
** Tags: security tegile
--
You received this bug notification because you are a member of OpenStack
Security, which is subscribed to OpenStack.
https://bugs.launchpad.net/bugs/1662563
Title:
Tegile disabling certificate verification
Status in Cinder:
New
Bug description:
Tegile is making reqeust calls with verify=False which disables SSL certificate checks in the following files:
cinder/volume/drivers/tegile.py
As suggested in this patch set
(https://review.openstack.org/#/c/426385/), this bug is being opened
in order to either fix the checks or add comments in the driver
explaining why this is safe.
To manage notifications about this bug go to:
https://bugs.launchpad.net/cinder/+bug/1662563/+subscriptions
More information about the Openstack-security
mailing list