A new configuration option is available in cinder for setting
the CA path. Configure this option in devstack when native SSL
or TLS proxy is configured.
Change-Id: I2cf9a3b8ba8e4896bd98efe0fb6f7d62fb279d90
Closes-Bug: 1384267
| ... | ... |
@@ -306,6 +306,7 @@ function configure_cinder {
|
| 306 | 306 |
iniset $CINDER_CONF DEFAULT glance_api_servers "${GLANCE_SERVICE_PROTOCOL}://${GLANCE_HOSTPORT}"
|
| 307 | 307 |
if is_ssl_enabled_service glance || is_service_enabled tls-proxy; then |
| 308 | 308 |
iniset $CINDER_CONF DEFAULT glance_protocol https |
| 309 |
+ iniset $CINDER_CONF DEFAULT glance_ca_certificates_file $SSL_BUNDLE_FILE |
|
| 309 | 310 |
fi |
| 310 | 311 |
|
| 311 | 312 |
# Register SSL certificates if provided |