← Back to team overview

yahoo-eng-team team mailing list archive

  1. yahoo-eng-team team
  2. Mailing list archive
  3. Message #40296

[Bug 1506842] [NEW] Glanceclient + SSL - Show warnings in console

  Thread Previous • Date Previous • • Thread Next 
Public bug reported:

If we use glanceclient with ssl, console displays few "extra" warnings
like this:

/usr/lib/python2.7/dist-packages/urllib3/util/ssl_.py:90: InsecurePlatformWarning: A true SSLContext object is not available. This prevents urllib3 from configuring SSL appropriately and may cause certain SSL connections to fail. For more information, see https://urllib3.readthedocs.org/en/latest/security.html#insecureplatformwarning.
  InsecurePlatformWarning
/usr/lib/python2.7/dist-packages/urllib3/connection.py:251: SecurityWarning: Certificate has no `subjectAltName`, falling back to check for a `commonName` for now. This feature is being removed by major browsers and deprecated by RFC 2818. (See https://github.com/shazow/urllib3/issues/497 for details.)
  SecurityWarning

or that:

/usr/lib/python2.7/dist-packages/urllib3/util/ssl_.py:90: InsecurePlatformWarning: A true SSLContext object is not available. This prevents urllib3 from configuring SSL appropriately and may cause certain SSL connections to fail. For more information, see https://urllib3.readthedocs.org/en/latest/security.html#insecureplatformwarning.
  InsecurePlatformWarning
/usr/lib/python2.7/dist-packages/urllib3/connectionpool.py:770: InsecureRequestWarning: Unverified HTTPS request is being made. Adding certificate verification is strongly advised. See: https://urllib3.readthedocs.org/en/latest/security.html
  InsecureRequestWarning)

Affected: python-glanceclient (and CLI).

Steps to reproduce:

1. Deploy openstack with enabling services in HTTPS mode (using TLS).
2. Try to use this command: glance image-list

Actual result: Displays a list of images with some warnings.

root@node-1:~# glance image-list
/usr/lib/python2.7/dist-packages/urllib3/util/ssl_.py:90: InsecurePlatformWarning: A true SSLContext object is not available. This prevents urllib3 from configuring SSL appropriately and may cause certain SSL connections to fail. For more information, see https://urllib3.readthedocs.org/en/latest/security.html#insecureplatformwarning.
  InsecurePlatformWarning
/usr/lib/python2.7/dist-packages/urllib3/connection.py:251: SecurityWarning: Certificate has no `subjectAltName`, falling back to check for a `commonName` for now. This feature is being removed by major browsers and deprecated by RFC 2818. (See https://github.com/shazow/urllib3/issues/497 for details.)
  SecurityWarning
+--------------------------------------+--------+
| ID                                   | Name   |
+--------------------------------------+--------+
| 43c99677-94b4-4356-b3ee-cd3690f26fdc | TestVM |
+--------------------------------------+--------+

Excepted result: Displays a list of images without any warnings.

root@node-1:~# glance image-list

+--------------------------------------+--------+
| ID                                   | Name   |
+--------------------------------------+--------+
| 43c99677-94b4-4356-b3ee-cd3690f26fdc | TestVM |
+--------------------------------------+--------+

** Affects: glance
     Importance: Undecided
     Assignee: Kairat Kushaev (kkushaev)
         Status: New

** Affects: python-glanceclient
     Importance: Undecided
     Assignee: Kairat Kushaev (kkushaev)
         Status: New


** Tags: cli

** Tags added: cli

** Also affects: python-glanceclient
   Importance: Undecided
       Status: New

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to Glance.
https://bugs.launchpad.net/bugs/1506842

Title:
  Glanceclient + SSL - Show warnings in console

Status in Glance:
  New
Status in python-glanceclient:
  New

Bug description:
  If we use glanceclient with ssl, console displays few "extra" warnings
  like this:

  /usr/lib/python2.7/dist-packages/urllib3/util/ssl_.py:90: InsecurePlatformWarning: A true SSLContext object is not available. This prevents urllib3 from configuring SSL appropriately and may cause certain SSL connections to fail. For more information, see https://urllib3.readthedocs.org/en/latest/security.html#insecureplatformwarning.
    InsecurePlatformWarning
  /usr/lib/python2.7/dist-packages/urllib3/connection.py:251: SecurityWarning: Certificate has no `subjectAltName`, falling back to check for a `commonName` for now. This feature is being removed by major browsers and deprecated by RFC 2818. (See https://github.com/shazow/urllib3/issues/497 for details.)
    SecurityWarning

  or that:

  /usr/lib/python2.7/dist-packages/urllib3/util/ssl_.py:90: InsecurePlatformWarning: A true SSLContext object is not available. This prevents urllib3 from configuring SSL appropriately and may cause certain SSL connections to fail. For more information, see https://urllib3.readthedocs.org/en/latest/security.html#insecureplatformwarning.
    InsecurePlatformWarning
  /usr/lib/python2.7/dist-packages/urllib3/connectionpool.py:770: InsecureRequestWarning: Unverified HTTPS request is being made. Adding certificate verification is strongly advised. See: https://urllib3.readthedocs.org/en/latest/security.html
    InsecureRequestWarning)

  Affected: python-glanceclient (and CLI).

  Steps to reproduce:

  1. Deploy openstack with enabling services in HTTPS mode (using TLS).
  2. Try to use this command: glance image-list

  Actual result: Displays a list of images with some warnings.

  root@node-1:~# glance image-list
  /usr/lib/python2.7/dist-packages/urllib3/util/ssl_.py:90: InsecurePlatformWarning: A true SSLContext object is not available. This prevents urllib3 from configuring SSL appropriately and may cause certain SSL connections to fail. For more information, see https://urllib3.readthedocs.org/en/latest/security.html#insecureplatformwarning.
    InsecurePlatformWarning
  /usr/lib/python2.7/dist-packages/urllib3/connection.py:251: SecurityWarning: Certificate has no `subjectAltName`, falling back to check for a `commonName` for now. This feature is being removed by major browsers and deprecated by RFC 2818. (See https://github.com/shazow/urllib3/issues/497 for details.)
    SecurityWarning
  +--------------------------------------+--------+
  | ID                                   | Name   |
  +--------------------------------------+--------+
  | 43c99677-94b4-4356-b3ee-cd3690f26fdc | TestVM |
  +--------------------------------------+--------+

  Excepted result: Displays a list of images without any warnings.

  root@node-1:~# glance image-list

  +--------------------------------------+--------+
  | ID                                   | Name   |
  +--------------------------------------+--------+
  | 43c99677-94b4-4356-b3ee-cd3690f26fdc | TestVM |
  +--------------------------------------+--------+

To manage notifications about this bug go to:
https://bugs.launchpad.net/glance/+bug/1506842/+subscriptions

Follow ups

  Thread Previous • Date Previous • • Thread Next