OpenStack Security Advisory

  1. Bug #1192229
  2. Comment #3

Comment 3 for bug 1192229

Revision history for this message
Thomas Leaman (thomas-leaman) wrote : Re: verify_callback's second if will never be run

Currently, commands like the following will pass verification

    glance -A XXX -U https://206.164.176.31:443 index

and it shouldn't! From looking in the code, it's obvious that the expected behavior should be to call host_matches_cert. But this call is being bypassed entirely by the mishandling of the preverify_ok int as a bool.