Same code is also in oslo/vmware/rw_handles.py
** Also affects: oslo.vmware
Importance: Undecided
Status: New
--
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to OpenStack Compute (nova).
https://bugs.launchpad.net/bugs/1374000
Title:
VMWare: file writer class uses unsafe SSL connection
Status in OpenStack Compute (Nova):
In Progress
Status in Oslo VMware library for OpenStack projects:
New
Bug description:
VMwareHTTPWriteFile uses httplib.HTTPSConnection objects. In Python
2.x those do not perform CA checks so client connections are
vulnerable to MiM attacks.
This is the specific version of
https://bugs.launchpad.net/nova/+bug/1188189
To manage notifications about this bug go to:
https://bugs.launchpad.net/nova/+bug/1374000/+subscriptions
--
Mailing list: https://launchpad.net/~yahoo-eng-team
Post to : yahoo-eng-team@lists.launchpad.net
Unsubscribe : https://launchpad.net/~yahoo-eng-team
More help : https://help.launchpad.net/ListHelp
