Back to bug 1040162

Who When What Removed Added
Rob Crittenden 2013-12-10 21:00:10 UTC Blocks 998599
RHEL Program Management 2013-12-10 21:08:05 UTC Target Release --- 4.0
Perry Myers 2013-12-10 21:15:13 UTC Assignee rhos-maint fpercoco
Target Milestone --- async
Flavio Percoco 2013-12-11 08:21:36 UTC Status NEW ASSIGNED
Alan Pevec 2013-12-11 11:41:14 UTC Target Milestone async rc
Alan Pevec 2013-12-11 11:41:39 UTC CC apevec
Flavio Percoco 2013-12-11 12:04:45 UTC Status ASSIGNED POST
Flavio Percoco 2013-12-11 12:17:51 UTC Keywords OtherQA
Dafna Ron 2013-12-11 12:18:45 UTC CC dron
Flavio Percoco 2013-12-11 13:14:41 UTC Status POST MODIFIED
Fixed In Version openstack-glance-2013.2-5.el6ost
Flavio Percoco 2013-12-11 14:16:51 UTC Doc Text Cause:

By default, TCP is used as transport for QPID connections. If you like to enable SSL, there is a flat 'qpid_protocol = ssl' available in glance-api.conf. However, python-qpid client is awaiting transport type instead of protocol.

Consequence:

Notifications going to qpid and requiring ssl wouldn't work.

Fix:

Asssign the qpid_protocol configuration variable to `connection.transport`
Perry Myers 2013-12-11 16:26:21 UTC Priority unspecified high
Severity unspecified high
errata-xmlrpc 2013-12-11 21:18:00 UTC Status MODIFIED ON_QA
Don Domingo 2013-12-11 22:02:08 UTC CC ddomingo
Doc Text Cause:

By default, TCP is used as transport for QPID connections. If you like to enable SSL, there is a flat 'qpid_protocol = ssl' available in glance-api.conf. However, python-qpid client is awaiting transport type instead of protocol.

Consequence:

Notifications going to qpid and requiring ssl wouldn't work.

Fix:

Asssign the qpid_protocol configuration variable to `connection.transport`
By default, QPID uses TCP as a connection transport instead of connection protocol. Previously, the procedure for enabling SSL in QPID connections was to set 'qpid_protocol = ssl' in /etc/glance/glance-api.conf. This setting, however, sets connection protocol; the python-qpid client, on the other hand, expects a connection transport type. The mismatch prevented QPID from actually establishing an SSL connection.

With this release, the 'qpid_protocol = ssl' setting now enables SSL for the connection transport instead of connection protocol. As such, QPID can now successfully establish SSL connections.
Flavio Percoco 2013-12-16 17:26:12 UTC Status ON_QA VERIFIED
errata-xmlrpc 2013-12-19 17:45:15 UTC Status VERIFIED RELEASE_PENDING
errata-xmlrpc 2013-12-20 00:44:03 UTC Status RELEASE_PENDING CLOSED
Resolution --- ERRATA
Last Closed 2013-12-19 19:44:03 UTC
Perry Myers 2016-04-26 19:27:26 UTC CC pmyers

Back to bug 1040162