Cloudbyte driver using HTTPSConnection

Bug #1658761 reported by Nicholas Jones
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
Cinder
Invalid
High
Amit Kumar Das

Bug Description

Bug filed to track drivers individually.

HTTPSConnection does not validate server certificates and should be avoided.

In cinder/cinder/volume/drivers/cloudbyte/cloudbyte.py

    110 def _execute_and_get_response_details(self, host, url):
    ...
    115 # Prepare the connection
    116 connection = http_client.HTTPSConnection(host)
    117 # Make the connection
    118 connection.request('GET', url)
    119 # Extract the response as the connection was successful
    120 response = connection.getresponse()

See:
https://bugs.launchpad.net/cinder/+bug/1188189
https://wiki.openstack.org/wiki/OSSN/OSSN-0033

Xing Yang (xing-yang)
Changed in cinder:
status: New → Confirmed
importance: Undecided → High
Revision history for this message
Xing Yang (xing-yang) wrote :

Hi Amit,

I assigned this to you because you are listed as Cloudbyte driver's maintainer. Can you please take a look of this issue? Thanks.

Changed in cinder:
assignee: nobody → Amit Kumar Das (amit-das-8)
Matt Smith (mss-4)
tags: added: cloudbyte drivers
Revision history for this message
Sean McGinnis (sean-mcginnis) wrote :

Driver has been removed.

Changed in cinder:
status: Confirmed → Invalid
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.