Bug 1316607 - [RFE][glance] Image Signing and Verification Support
Summary: [RFE][glance] Image Signing and Verification Support
Keywords:
Status: CLOSED ERRATA
Alias: None
Product: Red Hat OpenStack
Classification: Red Hat
Component: openstack-glance
Version: unspecified
Hardware: Unspecified
OS: Unspecified
high
medium
Target Milestone: ga
: 9.0 (Mitaka)
Assignee: Flavio Percoco
QA Contact: Avi Avraham
Don Domingo
URL: https://blueprints.launchpad.net/glan...
Whiteboard: upstream_milestone_liberty-3 upstream...
Depends On: 1257306
Blocks: 1342849 1365571
TreeView+ depends on / blocked
 
Reported: 2016-03-10 15:23 UTC by Sean Cohen
Modified: 2022-08-16 14:06 UTC (History)
15 users (show)

Fixed In Version: openstack-glance-12.0.0-1.el7ost
Doc Type: Enhancement
Doc Text:
This update adds support for signing and signature validation of bootable images, and validation of uploaded signed images. If an uploaded image is signed, Glance verifies the signature before storing it, and in cases where the image can be uploaded, the crypto mode and keys must be correctly entered. Authentication protects against counterfeit images and unauthorized images.
Clone Of: 1257306
: 1365571 (view as bug list)
Environment:
Last Closed: 2016-08-24 12:53:08 UTC
Target Upstream Version:

Attachments (Terms of Use)
Add an attachment (proposed patch, testcase, etc.)


Links
System ID Private Priority Status Summary Last Updated
OpenStack gerrit 177948 0 None None None 2016-03-10 15:22:59 UTC
OpenStack gerrit 183137 0 None None None 2016-03-10 15:22:59 UTC
Red Hat Issue Tracker OSP-4547 0 None None None 2022-08-16 14:06:21 UTC
Red Hat Knowledge Base (Solution) 2604741 0 None None None 2016-09-06 14:29:00 UTC
Red Hat Product Errata RHEA-2016:1761 0 normal SHIPPED_LIVE Red Hat OpenStack Platform 9 General Availability Advisory 2016-08-24 16:49:52 UTC

Comment 1 Sean Cohen 2016-03-10 15:25:05 UTC 
Spec: http://specs.openstack.org/openstack/glance-specs/specs/mitaka/implemented/image-signing-and-verification-support.html
Comment 2 Mike McCune 2016-03-28 22:37:22 UTC 
This bug was accidentally moved from POST to MODIFIED via an error in automation, please see mmccune with any questions
Comment 15 nlevinki 2016-08-23 06:22:36 UTC 
This feature code is partially install on RHOS9, It is missing Barbican ( the store for the keys) and therefore it will not work.
A clone bug was open on RHOS10.
I am moving this bug to verify since the code is in, it is TechPreview.
The verification of this feature moved to RHOS10
Comment 17 errata-xmlrpc 2016-08-24 12:53:08 UTC 
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://rhn.redhat.com/errata/RHEA-2016-1761.html
Note You need to log in before you can comment on or make changes to this bug.