Bug 1041831

Summary: [RFE][python-glanceclient]: Use python-openssl for https connections
Product: Red Hat OpenStack Reporter: RHOS Integration <rhos-integ>
Component: RFEsAssignee: RHOS Maint <rhos-maint>
Status: CLOSED UPSTREAM QA Contact:
Severity: medium Docs Contact:
Priority: unspecified    
Version: unspecifiedCC: markmc, yeylon
Target Milestone: ---Keywords: FutureFeature
Target Release: ---   
Hardware: Unspecified   
OS: Unspecified   
URL: https://blueprints.launchpad.net/python-glanceclient/+spec/ssl-connect-rework
Whiteboard: upstream_milestone_v0.6.0 upstream_status_implemented upstream_definition_approved
Fixed In Version: Doc Type: Enhancement
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2015-03-19 17:40:18 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:

Description RHOS Integration 2013-12-12 19:32:26 UTC
Cloned from launchpad blueprint https://blueprints.launchpad.net/python-glanceclient/+spec/ssl-connect-rework.

Description:

Update VerifiedHTTPSConnection to use python-openssl for its connect method.

In Python 2.7 there are limited ssl features.

Using python-openssl would allow:

* The ability to disable SSL compression on a per connection basis for performance reasons. With compressed qcow2 images the download performance can increase by  more than 400% when the redundant compression is disabled.
* Neater loading of the default system CA cert files.

Note that much of the functionality in python-openssl maps to Python 3.3 so if/when we move to a newer version of Python replacing the python-openssl code with Python 3.3 code should be simple.

Specification URL (additional information):

None