Comment 8 for bug 1411063

Revision history for this message
Brant Knudson (blk-u) wrote : Re: S3token incorrect condition expression for ssl_insecure

comments on the impact description in comment 7 :

in Title, change "honoured" to "honored" for US spelling. Also, can remove "in paste configs", since the S3Token only supports paste config (unlike auth_token middleware that supports config file, too).

Seems like Products should also have python-keystoneclient ?

In the Description, final sentence should be "All versions of
s3_token middleware with TLS settings configured are
affected by this flaw." (remove the section about paste.ini since s3token can only be configured via paste.ini).