Back to bug 1021536

Who When What Removed Added
Xavier Queralt 2013-10-21 13:21:41 UTC Depends On 1021537
RHEL Program Management 2013-10-21 13:52:05 UTC Target Release 3.0 4.0
Xavier Queralt 2013-10-21 14:02:40 UTC Target Release 4.0 3.0
Eric Harney 2013-10-21 14:13:39 UTC Assignee rhos-maint eharney
Alan Pevec 2013-10-23 16:56:15 UTC Status NEW POST
CC apevec
Eric Harney 2013-11-21 15:39:43 UTC Link ID OpenStack gerrit 56993
Eric Harney 2013-11-27 14:34:16 UTC Target Release 3.0 4.0
Target Milestone async ---
Ayal Baron 2013-12-01 10:19:38 UTC CC abaron
Eric Harney 2013-12-04 20:27:00 UTC Keywords ZStream TestOnly
Eric Harney 2013-12-04 20:27:32 UTC Status POST MODIFIED
Fixed In Version openstack-cinder-2013.2-5.el6ost
Eric Harney 2013-12-04 20:28:12 UTC Status MODIFIED POST
Dafna Ron 2013-12-06 12:38:34 UTC CC dron
Eric Harney 2013-12-06 14:34:04 UTC Status POST MODIFIED
Lon Hohberger 2013-12-06 20:43:44 UTC Status MODIFIED ON_QA
Don Domingo 2013-12-10 05:21:25 UTC CC ddomingo
Flags needinfo?(rcritten)
Rob Crittenden 2013-12-10 14:23:18 UTC Doc Text Cause: Setting qpid_protocol=ssl in nova, heat, cinder, keystone or ceilometer.

Consequence: SSL is not enabled in the qpid client.

Fix: The wrong variable was being set in the qpid client. When it is set to the right variable, transport, then SSL from the client is successful.

Result:
Flags needinfo?(rcritten)
Don Domingo 2013-12-13 02:28:44 UTC Doc Text Cause: Setting qpid_protocol=ssl in nova, heat, cinder, keystone or ceilometer.

Consequence: SSL is not enabled in the qpid client.

Fix: The wrong variable was being set in the qpid client. When it is set to the right variable, transport, then SSL from the client is successful.

Result:
By default, QPID uses TCP as a connection transport instead of connection protocol. Previously, the procedure for enabling SSL in QPID connections was to set 'qpid_protocol = ssl' in /etc/glance/glance-api.conf. This setting, however, sets connection protocol; the python-qpid client, on the other hand, expects a connection transport type. The mismatch prevented QPID from actually establishing an SSL connection.

With this release, the 'qpid_protocol = ssl' setting now enables SSL for the connection transport instead of connection protocol. As such, QPID can now successfully establish SSL connections.
Scott Lewis 2013-12-16 18:40:47 UTC Target Milestone --- rc
Scott Lewis 2013-12-19 14:32:07 UTC Blocks 1045057
errata-xmlrpc 2013-12-19 17:35:56 UTC Status ON_QA RELEASE_PENDING
errata-xmlrpc 2013-12-20 00:30:12 UTC Status RELEASE_PENDING CLOSED
Resolution --- ERRATA
Last Closed 2013-12-19 19:30:12 UTC
Lon Hohberger 2014-01-20 15:51:29 UTC Blocks 1055616
Lon Hohberger 2014-01-20 15:56:28 UTC Blocks 1045057
John Skeoch 2014-06-18 07:00:40 UTC CC dallan
Perry Myers 2016-04-26 18:26:55 UTC CC pmyers
Russell Bryant 2019-09-09 16:50:40 UTC CC rbryant

Back to bug 1021536