Change in ovirt-engine[master]: engine: Use external providers trust store for neutron API

Code Review gerrit at ovirt.org
Thu Apr 6 07:31:56 UTC 2017


>From Moti Asayag <masayag at redhat.com>:

Moti Asayag has submitted this change and it was merged.

Change subject: engine: Use external providers trust store for neutron API
......................................................................


engine: Use external providers trust store for neutron API

Use the external providers trust store to connect to external network
providers neutron API. This enables the usage of self signed
certificates by external network providers neutron API, if the
certificate of the external network provider, or its certification
authority, is in engine's external providers trust store.

On the other hand, this change requires that the certificate of the
external network provider, or its certification authority, is added
to the external providers trust store.
The external providers trust store does not contain any default entries,
especially it does not contain the usual root certification authorities.
Via the web user interface of the "Test" functionality the user can
add the certificate of the external network providers neutron API
comfortably.

This patch does not effect the keystone API.

Change-Id: I79a289015329c0fa904b984a8764e73a18da9e5f
Signed-off-by: Dominik Holler <dholler at redhat.com>
---
M backend/manager/modules/bll/src/main/java/org/ovirt/engine/core/bll/provider/network/openstack/BaseNetworkProviderProxy.java
1 file changed, 41 insertions(+), 5 deletions(-)

Approvals:
  Martin Peřina: Looks good to me, but someone else must approve
  Dominik Holler: Verified
  Jenkins CI: Passed CI tests
  Moti Asayag: Looks good to me, approved



-- 
To view, visit https://gerrit.ovirt.org/74839
To unsubscribe, visit https://gerrit.ovirt.org/settings

Gerrit-MessageType: merged
Gerrit-Change-Id: I79a289015329c0fa904b984a8764e73a18da9e5f
Gerrit-PatchSet: 8
Gerrit-Project: ovirt-engine
Gerrit-Branch: master
Gerrit-Owner: Dominik Holler <dholler at redhat.com>
Gerrit-Reviewer: Dan Kenigsberg <danken at redhat.com>
Gerrit-Reviewer: Dominik Holler <dholler at redhat.com>
Gerrit-Reviewer: Jenkins CI
Gerrit-Reviewer: Marcin Mirecki <mmirecki at redhat.com>
Gerrit-Reviewer: Martin Mucha <mmucha at redhat.com>
Gerrit-Reviewer: Martin Peřina <mperina at redhat.com>
Gerrit-Reviewer: Moti Asayag <masayag at redhat.com>
Gerrit-Reviewer: gerrit-hooks <automation at ovirt.org>


More information about the Engine-commits mailing list