swiftclient /info call does not respect --insecure

Bug #1381866 reported by clayg
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
OpenStack Object Storage (swift)
Fix Released
Undecided
Pete Zaitcev

Bug Description

If you have a cluster with a self signed cert you can't make a `swift info` request against it - you get:

[Errno 1] _ssl.c:504: error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed

using --insecure or SWIFTCLIENT_INSECURE=true works fine for *other* requests - but these options are not respected for the info command - and they should be!

Note: if you curl https://myswiftcluster/info with -k it works fine, it's not the cluster or something specific about that endpoint - it's just the command line tool.

Revision history for this message
Pete Zaitcev (zaitcev) wrote :

Unfortunately it's supposed to work like described. The explicit flag is necessary. In that way "swift --insecure" is an equivalent of "curl -k".

Revision history for this message
Pete Zaitcev (zaitcev) wrote :

Oh, wait, never mind. Are you saying that --insecure has no effect on /info although it should?

Revision history for this message
clayg (clay-gerrard) wrote :

correct, I tried to clean up the wording - please feel free to amend further.

description: updated
tags: added: low-hanging-fruit
Revision history for this message
Pete Zaitcev (zaitcev) wrote :

Very low fruit indeed, see:
  https://review.openstack.org/129364

Changed in swift:
status: New → In Progress
assignee: nobody → Pete Zaitcev (zaitcev)
Changed in swift:
status: In Progress → Fix Committed
Thierry Carrez (ttx)
Changed in swift:
milestone: none → 2.2.1
status: Fix Committed → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.