Castellan should be able to bypass SSL certificate check

Bug #1516793 reported by Sungjin Yook
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
castellan
Fix Released
Undecided
Sungjin Yook

Bug Description

Issue statement
=============

There's a way to pass "verify=False" when creating keystone session and pass that in while instantiating barbicanClient.

i.e.
from keystoneclient import session
...
sess = session.Session(auth=auth, verify=False)
self.barbican = client.Client(session=sess, endpoint="XXX.XXX.XXX.XXX")

So far I am not seeing this option in castellan.
which is really important to have while developing application which can not use proper cert yet.

proposal
=======
create a similar mechanism in castellan as described above.

Sungjin Yook (sungyook)
Changed in castellan:
assignee: nobody → Sungjin Yook (sungyook)
summary: - Castellan should be able to bypass SSL bypass certificate check
+ Castellan should be able to bypass SSL certificate check
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to castellan (master)

Reviewed: https://review.openstack.org/398637
Committed: https://git.openstack.org/cgit/openstack/castellan/commit/?id=a6b25bb136e90cb25df336fc4e9d6db4f09c4cb2
Submitter: Jenkins
Branch: master

commit a6b25bb136e90cb25df336fc4e9d6db4f09c4cb2
Author: Kaitlin Farr <email address hidden>
Date: Wed Nov 16 17:51:24 2016 -0500

    Add option for verifying TLS (https) requests

    This new option should be used with caution, but is useful
    for development environments where the certificates can't
    be verified yet.

    Closes-Bug: #1516793

    Change-Id: I2e5433fda8dec02556a6715b8182201daf8fe9bb

Changed in castellan:
status: New → Fix Released
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix included in openstack/castellan 0.6.0

This issue was fixed in the openstack/castellan 0.6.0 release.

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.