Comment 0 for bug 1790598

If the nova-api-metadata service is secured with a certificate that makes use of IP based SAN's, under Python 2 certificate validation will fail as the ssl module does not support use of IP addresses in cert SAN fields (and httplib2 which is used to make the request uses ssl directly).

Master branch of neutron has switched to using requests (via urllib3 which does support IP address based SAN's under Python 2) to make these calls, supporting use of certs with IP address based SAN's.