[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[Openstack-security] [Bug 1662563] Re: Tegile disabling certificate verification


https://review.openstack.org/#/c/501333/ removed this driver.

** Changed in: cinder
       Status: New => Fix Committed

-- 
You received this bug notification because you are a member of OpenStack
Security SIG, which is subscribed to OpenStack.
https://bugs.launchpad.net/bugs/1662563

Title:
  Tegile disabling certificate verification

Status in Cinder:
  Fix Committed

Bug description:
  Tegile is making reqeust calls with verify=False which disables SSL certificate checks in the following files:
  cinder/volume/drivers/tegile.py

  As suggested in this patch set
  (https://review.openstack.org/#/c/426385/), this bug is being opened
  in order to either fix the checks or add comments in the driver
  explaining why this is safe.

To manage notifications about this bug go to:
https://bugs.launchpad.net/cinder/+bug/1662563/+subscriptions