The --insecure flag causes requests to switch to port 80
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
python-openstackclient |
Incomplete
|
Undecided
|
Unassigned |
Bug Description
I'm setting up an internal keystone server that is served through haproxy on port 443 with a (temporary) self signed certificate. To test my installation I need to be able to disable certificate verification during calls to keystone.
$ echo $OS_AUTH_URL
https:/
When I try to connect I get an error due to failing to verify the certificate:
$ openstack catalog show object-store
Discovering versions from the identity service failed when creating the password plugin. Attempting to determine version from URL.
SSL exception connecting to https:/
The output of `openstack --help` shows that the `--insecure` flag can be used to disable certificate verification:
$ openstack --help|grep '^ --insecure'
--insecure Disable server certificate verification
However, when I pass this flag to the `openstack` command it seems that, instead of disabling certificate verification, the `OS_AUTH_URL` setting is modified to change the scheme to http and port to 80:
$ openstack --insecure catalog show object-store
Unable to establish connection to http://
Either the documentation for the `--insecure` flag is wrong, or the flag is not implemented as documented.
I cannot reproduce this with the current client version. Please show the output of "openstack --version" and "openstack --debug --insecure catalog show object-store".