← Back to team overview

yahoo-eng-team team mailing list archive

[Bug 1432441] [NEW] do away with PROTOCOL_SSLv3

 

Public bug reported:

In Debian Testing, Python 2.7 does no longer include the symbols
PROTOCOL_SSLv2 and PROTOCOL_SSLv3. The attached patch fixes this against
Nova trunk.

Unrelated: The following command, run from /opt/stack in a devstack
environment, did not yield any call to the function
validate_ssl_version(), which is the only user of the affected data
structure:

find . -name '*.py' -type f |xargs grep -nF validate_ssl_version

The nova version, according to the PKG-INFO file, is 2015.1.dev70.

** Affects: nova
     Importance: Undecided
         Status: New

** Patch added: "disarm old SSL protocol imports, and import new symbols"
   https://bugs.launchpad.net/bugs/1432441/+attachment/4346561/+files/nova.openstack.common.sslutils.py.patch

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to OpenStack Compute (nova).
https://bugs.launchpad.net/bugs/1432441

Title:
  do away with PROTOCOL_SSLv3

Status in OpenStack Compute (Nova):
  New

Bug description:
  In Debian Testing, Python 2.7 does no longer include the symbols
  PROTOCOL_SSLv2 and PROTOCOL_SSLv3. The attached patch fixes this
  against Nova trunk.

  Unrelated: The following command, run from /opt/stack in a devstack
  environment, did not yield any call to the function
  validate_ssl_version(), which is the only user of the affected data
  structure:

  find . -name '*.py' -type f |xargs grep -nF validate_ssl_version

  The nova version, according to the PKG-INFO file, is 2015.1.dev70.

To manage notifications about this bug go to:
https://bugs.launchpad.net/nova/+bug/1432441/+subscriptions


Follow ups

References