Bug#598463:

2011-01-18 Thread Jerry Chen
Hi all, Apache Libcloud 0.4.2 is now available for public consumption: - http://incubator.apache.org/libcloud/downloads.html - http://pypi.python.org/pypi/apache-libcloud/0.4.2 This release begins to address the SSL issue as mentioned previously. Thanks, Jerry -- To UNSUBSCRIBE, email to deb

Bug#598463:

2011-01-04 Thread Jerry Chen
Hi all, We have recently implemented SSL verification capability in libcloud 0.4.1-dev (slated for release this week). For more information: http://wiki.apache.org/incubator/LibcloudSSL The default setting of VERIFY_SSL_CERT=False emits a UserWarning when an SSL connection is first attempted,

Bug#598463: Alive

2010-12-09 Thread dave b
Never-mind, there has already been a potential patch emailed in that thread (that Soren linked to). -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Bug#598463: Alive

2010-12-08 Thread dave b
Um, well I could see if they would accept a patch I could make up soon... The problem is / was they closed the bug saying it was a python issue, where they didnt' even attempt to ensure that a https connection would be secured, through wrapping it in ssl, iirc. -- To UNSUBSCRIBE, email to debia

Bug#598463: Alive

2010-12-08 Thread Soren Hansen
Hi. I'm the "maintainer". I'll readily admit I've failed miserably to track this issue appropriately. Part of it is due to some rather unfortunate e-mail filtering, but that's certainly not all. (Debian bug mail ended in a folder I didn't subscribe to, but I noticed the issue when it was first rai

Bug#598463: Alive

2010-12-08 Thread Mehdi Dogguy
On 08/12/2010 21:57, Moritz Muehlenhoff wrote: [ Adding debian-release to CC, please remove libcloud from testing for now ] Removal hint added. Cheers, -- Mehdi Dogguy مهدي الدڤي http://dogguy.org/ -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of "u

Bug#598463: Alive

2010-12-08 Thread Moritz Muehlenhoff
On Fri, Nov 12, 2010 at 05:10:11PM +0100, Pietro Battiston wrote: > Il giorno ven, 12/11/2010 alle 13.46 +0100, Moritz Muehlenhoff ha > scritto: > > On Mon, Nov 08, 2010 at 11:08:38AM +0100, Pietro Battiston wrote: > > > I didn't forget this, it's just harder than I thought, in particular > > > con

Bug#598463: Alive

2010-11-12 Thread Pietro Battiston
Il giorno ven, 12/11/2010 alle 13.46 +0100, Moritz Muehlenhoff ha scritto: > On Mon, Nov 08, 2010 at 11:08:38AM +0100, Pietro Battiston wrote: > > I didn't forget this, it's just harder than I thought, in particular > > considering I have no cloud computing experience and account. > > > > I'm stil

Bug#598463: Alive

2010-11-12 Thread Moritz Muehlenhoff
On Mon, Nov 08, 2010 at 11:08:38AM +0100, Pietro Battiston wrote: > I didn't forget this, it's just harder than I thought, in particular > considering I have no cloud computing experience and account. > > I'm still committed to fix it (and also asked for help upstream), but > have no precise idea

Bug#598463: Alive

2010-11-08 Thread Pietro Battiston
I didn't forget this, it's just harder than I thought, in particular considering I have no cloud computing experience and account. I'm still committed to fix it (and also asked for help upstream), but have no precise idea of the time it will take. In particular, any help is appreciated. Pietro

Bug#598463: I can do that

2010-10-31 Thread Pietro Battiston
Il giorno dom, 31/10/2010 alle 21.01 +0100, Moritz Muehlenhoff ha scritto: > On Thu, Oct 21, 2010 at 09:57:50AM +0200, Pietro Battiston wrote: > > I wrote Soren 8 days ago informing him that I could take of that. > > > > I'll soon submit a patch. > > What's the status? That I'll soon submit a pa

Bug#598463: I can do that

2010-10-31 Thread Moritz Muehlenhoff
On Thu, Oct 21, 2010 at 09:57:50AM +0200, Pietro Battiston wrote: > I wrote Soren 8 days ago informing him that I could take of that. > > I'll soon submit a patch. What's the status? Cheers, Moritz -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject o

Bug#598463: I can do that

2010-10-21 Thread Pietro Battiston
I wrote Soren 8 days ago informing him that I could take of that. I'll soon submit a patch. Pietro signature.asc Description: This is a digitally signed message part

Bug#598463: python-libcloud: libcloud https connections are not secured against mitm attacks

2010-09-29 Thread david b
Package: python-libcloud Severity: grave Tags: security Justification: user security hole libcloud fails to perform ssl validation on https connections. This means that users of this module, who which perform api requests using https urls / connections are at risk to mitm attacks. See http://gith