yahoo-eng-team team mailing list archive

[Ian Cordasco <sigmavirus24@xxxxxxxxx>]

Those warnings are not generated by python-glanceclient, nor should they
be suppressed by it.

** Changed in: python-glanceclient
       Status: In Progress => Invalid

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to Glance.
https://bugs.launchpad.net/bugs/1506842

Title:
  Glanceclient + SSL - Show warnings in console

Status in Glance:
  Invalid
Status in Glance Client:
  Invalid

Bug description:
  If we use glanceclient with ssl, console displays few "extra" warnings
  like this:

  /usr/lib/python2.7/dist-packages/urllib3/util/ssl_.py:90: InsecurePlatformWarning: A true SSLContext object is not available. This prevents urllib3 from configuring SSL appropriately and may cause certain SSL connections to fail. For more information, see https://urllib3.readthedocs.org/en/latest/security.html#insecureplatformwarning.
    InsecurePlatformWarning
  /usr/lib/python2.7/dist-packages/urllib3/connection.py:251: SecurityWarning: Certificate has no `subjectAltName`, falling back to check for a `commonName` for now. This feature is being removed by major browsers and deprecated by RFC 2818. (See https://github.com/shazow/urllib3/issues/497 for details.)
    SecurityWarning

  or that:

  /usr/lib/python2.7/dist-packages/urllib3/util/ssl_.py:90: InsecurePlatformWarning: A true SSLContext object is not available. This prevents urllib3 from configuring SSL appropriately and may cause certain SSL connections to fail. For more information, see https://urllib3.readthedocs.org/en/latest/security.html#insecureplatformwarning.
    InsecurePlatformWarning
  /usr/lib/python2.7/dist-packages/urllib3/connectionpool.py:770: InsecureRequestWarning: Unverified HTTPS request is being made. Adding certificate verification is strongly advised. See: https://urllib3.readthedocs.org/en/latest/security.html
    InsecureRequestWarning)

  Affected: python-glanceclient (and CLI).

  Steps to reproduce:

  1. Deploy openstack with enabling services in HTTPS mode (using TLS).
  2. Try to use this command: glance image-list

  Actual result: Displays a list of images with some warnings.

  root@node-1:~# glance image-list
  /usr/lib/python2.7/dist-packages/urllib3/util/ssl_.py:90: InsecurePlatformWarning: A true SSLContext object is not available. This prevents urllib3 from configuring SSL appropriately and may cause certain SSL connections to fail. For more information, see https://urllib3.readthedocs.org/en/latest/security.html#insecureplatformwarning.
    InsecurePlatformWarning
  /usr/lib/python2.7/dist-packages/urllib3/connection.py:251: SecurityWarning: Certificate has no `subjectAltName`, falling back to check for a `commonName` for now. This feature is being removed by major browsers and deprecated by RFC 2818. (See https://github.com/shazow/urllib3/issues/497 for details.)
    SecurityWarning
  +--------------------------------------+--------+
  | ID                                   | Name   |
  +--------------------------------------+--------+
  | 43c99677-94b4-4356-b3ee-cd3690f26fdc | TestVM |
  +--------------------------------------+--------+

  Excepted result: Displays a list of images without any warnings.

  root@node-1:~# glance image-list

  +--------------------------------------+--------+
  | ID                                   | Name   |
  +--------------------------------------+--------+
  | 43c99677-94b4-4356-b3ee-cd3690f26fdc | TestVM |
  +--------------------------------------+--------+

To manage notifications about this bug go to:
https://bugs.launchpad.net/glance/+bug/1506842/+subscriptions