Glance

Verify the SSL certificate of the backing swift store

Registered by Stuart McLaren

This swift client change will, once merged, allow verification of the swift store's SSL certificate:

https://review.openstack.org/#/c/33473/

This prevents various MiM style attacks and so provides additional security.

Update (2014.02.19: This alternative patch has landed: https://review.openstack.org/#/c/69187/), so if we update our requirement to python-swiftclient >= 2.0.2 we should be good to go here.

Blueprint information

Status:
Not started
Approver:
None
Priority:
Undefined
Drafter:
Stuart McLaren
Direction:
Approved
Assignee:
None
Definition:
New
Series goal:
None
Implementation:
Unknown
Milestone target:
None

Related branches

Sprints

Whiteboard

Yikes, yes please!
However, it seems that the python-swiftclient change is a bit blocked until it can be moved to using requests. I'll throw this blueprint onto the wishlist for now. Once it becomes actionable again we can assign and target it.

markwash wishlist 2014-02-18

(?)

Work Items

This blueprint contains Public information 
Everyone can see this information.
Edit subscription

Subscribers

No subscribers.