swiftclient rpm in rdo can't work with https

Bug #1266661 reported by Liping Mao
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
python-swiftclient
New
Undecided
Unassigned

Bug Description

When I enable SSL, and use swift client call swift list, I get the following error:

# swift list
Traceback (most recent call last):
  File "/usr/bin/swift", line 1445, in <module>
    globals()['st_%s' % args[0]](parser, argv[1:], thread_manager)
  File "/usr/bin/swift", line 541, in st_list
    conn.get_account(marker=marker, prefix=options.prefix)[1]
  File "/usr/lib/python2.6/site-packages/swiftclient/client.py", line 1154, in get_account
    full_listing=full_listing)
  File "/usr/lib/python2.6/site-packages/swiftclient/client.py", line 1108, in _retry
    rv = func(self.url, self.token, *args, **kwargs)
  File "/usr/lib/python2.6/site-packages/swiftclient/client.py", line 377, in get_account
    resp = conn.getresponse()
  File "/usr/lib64/python2.6/httplib.py", line 996, in getresponse
    self.close()
  File "/usr/lib/python2.6/site-packages/swiftclient/https_connection.py", line 170, in close
    HTTPSConnection.close(self)
  File "/usr/lib/python2.6/site-packages/swiftclient/https_connection.py", line 170, in close
    HTTPSConnection.close(self)
  File "/usr/lib/python2.6/site-packages/swiftclient/https_connection.py", line 170, in close
    HTTPSConnection.close(self)
....
  File "/usr/lib/python2.6/site-packages/swiftclient/https_connection.py", line 170, in close
    HTTPSConnection.close(self)
RuntimeError: maximum recursion depth exceeded

My environment is :
CentOS + RDO repo

Packet flow is :
Swift client ---https--> haproxy(SSL proxy) ---http---> swift proxy

I find that the rpm in RDO repo modify the https_connection.py in 0002-Add-SSL-certificate-verification-by-default.patch:
http://pkgs.fedoraproject.org/cgit/python-swiftclient.git/tree/?h=el6-havana

If I remove the patch 0002-Add-SSL-certificate-verification-by-default.patch, and rebuild the rpm, then swiftclient can work well.
So there may be something wrong in 0002-Add-SSL-certificate-verification-by-default.patch .

Liping Mao (limao)
information type: Private Security → Public
Revision history for this message
Pete Zaitcev (zaitcev) wrote :

Was this reported in bugzilla.redhat.com?

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.