Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Impossible to specify CA cert #185

Open
isaac-s opened this issue Jan 9, 2018 · 0 comments
Open

Impossible to specify CA cert #185

isaac-s opened this issue Jan 9, 2018 · 0 comments

Comments

@isaac-s
Copy link
Contributor

isaac-s commented Jan 9, 2018

It is impossible to specify a CA cert to use for authenticating OpenStack's certificate.

Unless OpenStack's cert is trusted by a CA that is included in the requests library itself (note that the requests library does NOT consult the CA certs bundle of the OS), the user must specify insecure: True in order to connect, but this is not secure.

The reason is:

https://github.com/cloudify-cosmo/cloudify-openstack-plugin/blob/2.5.0/openstack_plugin_common/__init__.py#L588

This function will always end up passing either True or False to the verify kwarg of session.Session. We should also allow a string to be passed on. The string would be the path to the cert.

isaac-s added a commit that referenced this issue Jan 9, 2018
isaac-s added a commit that referenced this issue Jan 9, 2018
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant