RDO tickets are now tracked in Jira https://issues.redhat.com/projects/RDO/issues/
Bug 1487296 - Old version of python-backports-ssl_match_hostname being shipped
Summary: Old version of python-backports-ssl_match_hostname being shipped
Keywords:
Status: CLOSED CURRENTRELEASE
Alias: None
Product: RDO
Classification: Community
Component: distribution
Version: trunk
Hardware: Unspecified
OS: Unspecified
unspecified
unspecified
Target Milestone: ---
: trunk
Assignee: Haïkel Guémar
QA Contact: Shai Revivo
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2017-08-31 14:55 UTC by Mohammed Naser
Modified: 2020-07-30 10:56 UTC (History)
4 users (show)

Fixed In Version:
Clone Of:
Environment:
Last Closed: 2020-07-30 10:56:56 UTC
Embargoed:


Attachments (Terms of Use)

Description Mohammed Naser 2017-08-31 14:55:11 UTC
Description of problem:
At the moment, the version of `python-backports-ssl_match_hostname` which is being shipped is 3.4.0 which is missing a patch which is needed to validate IPs in SSL certificates.  This causes endless warnings and tracebacks in the OpenStack Magnum logs.

Version-Release number of selected component (if applicable):
python-backports-ssl_match_hostname 3.4.0
magnum is affected

How reproducible:
You need to have OpenStack Magnum deployed and then deploy a K8S cluster using it.  It will show tracebacks in the logs every few seconds due to failed SSL verification (because it tries to contact the server by the IP and 3.4.0 doesn't support that).

Steps to Reproduce:
1. Deploy Magnum
2. Deploy cluster
3. View logs

Actual results:
Stats fail to get collected

Expected results:
Stats should be collected without tracebacks

Additional info:
The specific patch which solves the problem in 3.5.0
https://bitbucket.org/brandon/backports.ssl_match_hostname/diff/backports/ssl_match_hostname/__init__.py?diff2=a8ef5d616d92&at=default

Comment 1 Haïkel Guémar 2017-08-31 14:57:11 UTC
Scratch build passed: http://cbs.centos.org/koji/taskinfo?taskID=217826

It's a compatibility backport from python3 stdlib, and API is stable, so I'm personally fine with pushing it as there's no update planned in EL7.

Comment 2 Alfredo Moralejo 2020-07-30 10:56:56 UTC
RDO ships python-backports-ssl_match_hostname-3.5.0.1-1.el7 since queens.

Closing this bz as currentrelease


Note You need to log in before you can comment on or make changes to this bug.