Bug 1040162

Summary:	Qpid protocol configuration is wrong, affects SSL
Product:	Red Hat OpenStack	Reporter:	Rob Crittenden <rcritten>
Component:	openstack-glance	Assignee:	Flavio Percoco <fpercoco>
Status:	CLOSED ERRATA	QA Contact:	Haim <hateya>
Severity:	high	Docs Contact:
Priority:	high
Version:	4.0	CC:	apevec, ddomingo, dron, eglynn, fpercoco, hateya, yeylon
Target Milestone:	rc	Keywords:	OtherQA
Target Release:	4.0
Hardware:	Unspecified
OS:	Unspecified
Whiteboard:
Fixed In Version:	openstack-glance-2013.2-5.el6ost	Doc Type:	Bug Fix
Doc Text:	By default, QPID uses TCP as a connection transport instead of connection protocol. Previously, the procedure for enabling SSL in QPID connections was to set 'qpid_protocol = ssl' in /etc/glance/glance-api.conf. This setting, however, sets connection protocol; the python-qpid client, on the other hand, expects a connection transport type. The mismatch prevented QPID from actually establishing an SSL connection. With this release, the 'qpid_protocol = ssl' setting now enables SSL for the connection transport instead of connection protocol. As such, QPID can now successfully establish SSL connections.	Story Points:	---
Clone Of:		Environment:
Last Closed:	2013-12-20 00:44:03 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:
Bug Depends On:
Bug Blocks:	998599

Description Rob Crittenden 2013-12-10 20:59:51 UTC

Description of problem:

notify_qpid.py appears to be suffering from the same issue as described in launchpad bug https://bugs.launchpad.net/oslo/+bug/1158807. Instead of setting connection.transport, it is attempting to set connection.protocol.

Version-Release number of selected component (if applicable):

openstack-glance-2013.2-1.el6.noarch

This is related to BZ https://bugzilla.redhat.com/show_bug.cgi?id=1029751 which fixed the same error in a different place in the code for other components like cinder and nova.

Comment 1 Rob Crittenden 2013-12-10 21:00:58 UTC

This is a one-line change fixed post-havana GA.

Comment 3 Flavio Percoco 2013-12-11 08:21:36 UTC

This was already merged upstream. Looks like it didn't get in during the last build.

The upstream fix: https://github.com/openstack/glance/commit/e20b2af381629d1f3923647952679871a68126f3

Comment 10 errata-xmlrpc 2013-12-20 00:44:03 UTC

Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

http://rhn.redhat.com/errata/RHEA-2013-1859.html