No option to disable TLS verification on HMC Z

Bug #2056208 reported by Junien F
14
This bug affects 2 people
Affects Status Importance Assigned to Milestone
MAAS
Triaged
Low
Anton Troyanov
Ubuntu on IBM z Systems
Triaged
Undecided
Unassigned

Bug Description

Hi,

When adding an "IBM HMC for Z" chassis to MAAS, there's no option to disable TLS verification for requests sent to the HMC.

I strongly suspect that most HMCs have a self-signed certificate, so having this option would be very useful.

This is supported by the python3-zhmcclient library that's used by MAAS, so it shouldn't be too hard to add.

Note : this feature is missing from MAAS 3.2.10, but as far as I can see from current master (https://git.launchpad.net/maas/tree/src/provisioningserver/drivers/power/hmcz.py?id=8b07c3d5c23d179841c8ede1515564d1d418bce0#n241), it hasn't been added since.

Thanks !

Frank Heimes (fheimes)
tags: added: s390x
Revision history for this message
Bill Wear (billwear) wrote :

this appears to be a feature, not a bug, but Ubuntu on IBM z Systems has already marked it as a bug. i have *no* way to reproduce this, so i'm triaging on trust. don't let me down! :)

Changed in maas:
status: New → Triaged
Frank Heimes (fheimes)
Changed in ubuntu-z-systems:
status: New → Triaged
Bill Wear (billwear)
Changed in maas:
importance: Undecided → Low
milestone: none → 3.2.x
Frank Heimes (fheimes)
description: updated
tags: added: bug-council
Changed in maas:
assignee: nobody → Anton Troyanov (troyanov)
summary: - [HMC Z] no option to disable TLS verification
+ No option to disable TLS verification on HMC Z
Revision history for this message
Anton Troyanov (troyanov) wrote :

FYI I am going to work on this bug in the upcoming pulse

Revision history for this message
Frank Heimes (fheimes) wrote :

Thank you Anton! (please don't hesitate to ping us Junien and me in case of any question - also on MM).

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.