neutron

BigSwitch/Floodlight backend cert verification

Registered by Kevin Benton on 2014-02-04

Currently the BigSwitch/Floodlight plugin uses the default httplib HTTPS class so it doesn't verify backend certificates.

This change would allow backend certificates to be verified using either CA certs, individual host certs (i.e. exact match), or SSH-style sticky authentication where the certificate is learned on the first connection.

Blueprint information

Status:: Complete

Approver:: Mark McClain

Priority:: Low

Drafter:: Kevin Benton

Direction:: Approved

Assignee:: Kevin Benton

Definition:: Approved

Series goal:: Accepted for icehouse

Implementation:: Implemented

Milestone target:: 2014.1

Started by: Kevin Benton on 2014-02-05

Completed by: Mark McClain on 2014-03-06

Related branches

Related bugs

Sprints

Whiteboard

https://review.openstack.org/#/c/70906/

Gerrit topic: https://review.openstack.org/#q,topic:bp/bsn-certificate-enforcement,n,z

Addressed by: https://review.openstack.org/70906
BigSwitch: Add SSL Certificate Validation

Gerrit topic: https://review.openstack.org/#q,topic:bug/1188189,n,z

Gerrit topic: https://review.openstack.org/#q,topic:fix_migrations,n,z

(?)

Work Items

Dependency tree

* Blueprints in grey have been implemented.

This blueprint contains Public information

Everyone can see this information.

Subscribers

No subscribers.