Comment 2 for bug 880910

Revision history for this message
Stuart McLaren (stuart-mclaren) wrote : Re: [Bug 880910] Re: Glance reports location (with credentials) in create return json

No prob. Hope to have something for you on the 'location' stuff "real soon now".

On Mon, 24 Oct 2011, Jay Pipes wrote:

> I'm on it. Thanks for the bug report, Stuart!
>
> ** Changed in: glance
> Status: New => Triaged
>
> ** Changed in: glance
> Importance: Undecided => High
>
> ** Changed in: glance
> Assignee: (unassigned) => Jay Pipes (jaypipes)
>
> ** Changed in: glance
> Milestone: None => essex-1
>
> --
> You received this bug notification because you are subscribed to the bug
> report.
> https://bugs.launchpad.net/bugs/880910
>
> Title:
> Glance reports location (with credentials) in create return json
>
> Status in OpenStack Image Registry and Delivery Service (Glance):
> Triaged
>
> Bug description:
> Hi,
>
> Watching what was going over the wire it looks like someone can get the backend credentials
> from performing an add -- see the 'redacted' text below. If this is a real bug feel free to assign to me.
>
>
> Frame 85: 743 bytes on wire (5944 bits), 743 bytes captured (5944 bits)
> Internet Protocol Version 4, Src: 127.0.0.1 (127.0.0.1), Dst: 127.0.0.1 (127.0.0.1)
> *** Port: 9292->58908
> Secure Sockets Layer
> Hypertext Transfer Protocol
> HTTP/1.1 201 Created\r\n
> [Expert Info (Chat/Sequence): HTTP/1.1 201 Created\r\n]
> [Message: HTTP/1.1 201 Created\r\n]
> [Severity level: Chat]
> [Group: Sequence]
> Request Version: HTTP/1.1
> Status Code: 201
> Response Phrase: Created
> Content-Type: application/json\r\n
> Content-Length: 448\r\n
> [Content length: 448]
> Location: https://0.0.0.0:9292/v1/images/10\r\n
> Etag: bfea3d69d8c0bf3fcec7f384484a7710\r\n
> Date: Mon, 24 Oct 2011 13:13:26 GMT\r\n
> \r\n
> Line-based text data: application/json
> {"image": {"status": "active", "name": "xx1", "deleted": false, "container_format": "ovf", "created_at": "2011-10-24T13:13:26", "disk_format": "raw", "updated_at": "2011-10-24T13:13:26", "properties": {}, "min_disk": 0, "id": 10, "location": "swift+https://redacted:redacted@x.x.x.x:443/auth/v1.0/glance/10", "checksum": "bfea3d69d8c0bf3fcec7f384484a7710", "owner": null, "is_public": true, "deleted_at": null, "min_ram": 0, "size": 681}}
>
> To manage notifications about this bug go to:
> https://bugs.launchpad.net/glance/+bug/880910/+subscriptions
>