Trove not working when OpenStack uses "insecure" SSL certificates

[Vincent Untz]

If any of keystone, nova, cinder, heat, swift (any OpenStack component trove connects to) is using SSL but with certificates that cannot be verified (aka "insecure" certificates), then trove doesn't work.

There's no option to specify this in trove.conf.

I also quickly checked the code, and when we create the clients, we never pass the insecure flag.

[Amrith Kumar (amrith)]

Vincent, I've assigned to myself as the bug is unassigned. I've looked at this area recently and am happy to fix.

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: master
Review: https://review.openstack.org/272686

[OpenStack Infra (hudson-openstack)]

Change abandoned by amrith (<email address hidden>) on branch: master
Review: https://review.openstack.org/272686

[Thomas Bechtold (toabctl)]

For Master, changeset is now https://review.openstack.org/#/c/410348/

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.openstack.org/410348
Committed: https://git.openstack.org/cgit/openstack/trove/commit/?id=e155ba93b5249770890a34f021a93eef83a73d4c
Submitter: Zuul
Branch: master

commit e155ba93b5249770890a34f021a93eef83a73d4c
Author: Thomas Bechtold <email address hidden>
Date: Tue Dec 13 19:05:24 2016 +0100

    Support insecure SSL when talking to services

    The certificates may not be known to Trove when doing requests
    to the different services so support insecure requests. This
    can be configured via the new config options

    - nova_api_insecure
    - cinder_api_insecure
    - neutron_api_insecure
    - swift_api_insecure

    All new config parameters default to 'False' so nothing changes
    if not explicitly configured.

    This is useful if the services use SSL adn Trove wants to talk to theses
    services without configuring the different certs.

    Change-Id: Ib59abd1500baad132e5c9f53895fd1eca18ac4d7
    Closes-Bug: #1535895

[OpenStack Infra (hudson-openstack)]

This issue was fixed in the openstack/trove 9.0.0.0b3 development milestone.