Glance SSL Configuration option

Registered by tim reddin

Currently the Glance API and Registry do not use SSL (SecureSocket Layer) to encrypt network traffic. Having the option to enable SSL for the API and Registry would provide improved security.

We propose to add changes to enable SSL in the API and Registry servers. The changes will complement the existing client side SSL code, and will be consistent with the SSL support/configuration implementation in Swift.

Proposed changes:

* API and Registry start SSL enabled by default
* Option for API and/or Registry to start SSL disabled
* SSL enabled/disabled via option in glance-api.conf/glance-registry.conf
* Certs/keys also specified via glance-api.conf/glance-registry.conf
* Unit test changes to verify both http/https
* Changes to 'glance' cli command to support connecting to
   both http/https servers.

Blueprint information

Status:
Complete
Approver:
None
Priority:
Undefined
Drafter:
None
Direction:
Needs approval
Assignee:
Stuart McLaren
Definition:
Obsolete
Series goal:
None
Implementation:
Unknown
Milestone target:
None
Completed by
Jay Pipes

Related branches

Sprints

Whiteboard

Hey guys, this is a duplicate of this earlier one:

https://blueprints.launchpad.net/glance/+spec/support-ssl

(?)

Work Items

This blueprint contains Public information 
Everyone can see this information.

Subscribers

No subscribers.