Nova doesn't allow for a cacert file to be specified when calling cinder (Issue when using self signed certs)

[Cian O'Driscoll]

nova/volume/cinder.py

    c = cinder_client.Client(context.user_id,
                             context.auth_token,
                             project_id=context.project_id,
                             auth_url=url,
                             insecure=CONF.cinder_api_insecure,
                             retries=CONF.cinder_http_retries)

Cinder client allows for a cacert arg to be passed to Client(). If a cacert file isn't passed to cinder client then the python-request library uses the cacert file in it's path "/usr/share/pyshared/requests/cacert.pem" rather then the system default of "/etc/ssl/certs /ca-certificates.crt". This causes an issue if you are using self signed certs with a custom ca authority.

Recommend(I will do the patch) to add a new flag to "nova/volume/cinder.py" where a cacert file can be passed to cinder Client().

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: master
Review: https://review.openstack.org/29246

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.openstack.org/29246
Committed: http://github.com/openstack/nova/commit/5bc5fd8855f39638522304102e1f839484b9bf81
Submitter: Jenkins
Branch: master

commit 5bc5fd8855f39638522304102e1f839484b9bf81
Author: Cian O'Driscoll <email address hidden>
Date: Wed May 15 15:14:01 2013 +0000

    Add ca cert file support to cinder client requests

    Allow for ca certificates file to be specified when doing cinder
    client requests. Needed when using custom ca authorities.

    Change-Id: Ib9aa15df2fc7d96cb8587c13769399e353c032c6
    Fixes: bug #1179476