Comment 1 for bug 920386

Revision history for this message
Dan Prince (dan-prince) wrote :

Hi Stewart,

Regarding #1:

This possibly sounds like a bug. If the glance server is using SSL client authentication should be optional. If client auth is off on the server side then glance clients would not need to have keys and certs when trying to connect.

Regarding #2:

I'd buy adding an option like this 'glance --no-cert-check'. This would allow you to use glance client for encryption but ignore/skip verification of the glance servers certificate. This flag would certainly be handy for development but you probably wouldn't want it in production as you'd be at risk for man-in-the-middle.

While these issues are related it may be best to file two separate tickets on these?