NSX bits cannot be downloaded via HTTPS

Bug #1356352 reported by Andrey Danin
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
Fuel for OpenStack
Fix Committed
High
Igor Gajsin

Bug Description

Our custom Puppet providers RRPM/RDPKG [0][1] don't support HTTPS connections with untrusted certificates.

There are two ways to fix it.
1) Rewrite providers to skip certificate verification.
2) Restrict a user to provide HTTP-only URL in the Settings tab [2].

I propose to implement 2) in 5.1 and move 1) to 6.0.

[0] https://github.com/stackforge/fuel-library/blob/master/deployment/puppet/plugin_neutronnsx/lib/puppet/provider/package/rrpm.rb#L8
[1] https://github.com/stackforge/fuel-library/blob/master/deployment/puppet/plugin_neutronnsx/lib/puppet/provider/package/rdpkg.rb#L8
[2] https://github.com/stackforge/fuel-web/blob/master/nailgun/nailgun/fixtures/openstack.yaml#L274

tags: added: vmware
Changed in fuel:
assignee: nobody → Igor Gajsin (igajsin)
status: Confirmed → Triaged
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to fuel-library (master)

Fix proposed to branch: master
Review: https://review.openstack.org/116845

Changed in fuel:
status: Triaged → In Progress
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to fuel-library (master)

Reviewed: https://review.openstack.org/116845
Committed: https://git.openstack.org/cgit/stackforge/fuel-library/commit/?id=d0904bb4e06c7d0faed25005f19930f89f23a3e6
Submitter: Jenkins
Branch: master

commit d0904bb4e06c7d0faed25005f19930f89f23a3e6
Author: Igor Gajsin <email address hidden>
Date: Tue Aug 26 14:31:23 2014 +0400

    Now nsx bits can be downloaded via https

    puppet skip certificate verification while download packages

    Change-Id: I04cbdf5f3a17fa7e2f124ffa984986f5a64a2ada
    Closes-Bug: #1356352

Changed in fuel:
status: In Progress → Fix Committed
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.