registry team mailing list archive

[Ewan Mellor <617788@xxxxxxxxxxxxxxxxxx>]

No, because that would cause missing arguments to look like present, empty
arguments.  This will cause the signature check to fail when arguments are
omitted by the client, because the server will include them in the plaintext.

Ewan.

On Mon, Aug 16, 2010 at 06:02:47PM +0100, Jay Pipes wrote:

> He also states one may use get_argument("name", "") to get around this
> issue.  Is it possible to do that in Nova's code?
> 
> -- 
> Cannot make EC2 API requests with empty arguments
> https://bugs.launchpad.net/bugs/617788
> You received this bug notification because you are a direct subscriber
> of the bug.
> 
> Status in OpenStack Compute (Nova): New
> 
> Bug description:
> EC2 API requests with empty arguments fail, because the signature check on the request fails.
> 
> Each EC2 request must include a Signature parameter.  This is generated by the client using, amongst other things, a canonicalized list of the other parameters in the request.  The specification states that parameters should be included "even if the parameter value is empty".
> 
> http://docs.amazonwebservices.com/AWSEC2/latest/DeveloperGuide/index.html?using-query-api.html
> 
> Requests signed in this way with empty parameter values fail the signature check by Nova.  This is because Tornado is throwing away empty arguments.  In this thread, Bret Taylor states that this is a deliberate decision by Tornado.
> 
> http://groups.google.com/group/python-tornado/browse_thread/thread/d4ec8d798f93c286/99049857d0a85f29?lnk=gst&q=How+does+Tornado+handle+blank+POST#99049857d0a85f29
> 
> To unsubscribe from this bug, go to:
> https://bugs.launchpad.net/nova/+bug/617788/+subscribe

-- 
Cannot make EC2 API requests with empty arguments
https://bugs.launchpad.net/bugs/617788
You received this bug notification because you are a member of Registry
Administrators, which is subscribed to OpenStack.