RepoMirrors/ceph
1
0
Fork 0
mirror of https://github.com/ceph/ceph synced 2025-02-21 09:57:26 +00:00
Code Issues Packages Projects Releases Wiki Activity

rgw: add "rgw_verify_ssl" config

Browse Source 
http_client whether try to verify ssl when sent https request

Signed-off-by: Shasha Lu <lu.shasha@eisoo.com>
This commit is contained in:
lu.shasha 2017-05-26 17:01:49 +08:00
parent 6b6c14f8c7
commit 8b83b83d1a
4 changed files with 14 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
doc/radosgw/config-ref.rst
View File

@ -385,6 +385,13 @@ Ceph configuration file, the default value will be set automatically.
:Default: ``-1``
``rgw verify ssl``
:Description: Verify SSL certificates while making requests.
:Type: Boolean
:Default: ``true``
Regions
=======

1
src/common/config_opts.h
View File

@ -1545,6 +1545,7 @@ OPTION(rgw_op_thread_suicide_timeout, OPT_INT, 0)
OPTION(rgw_thread_pool_size, OPT_INT, 100)
OPTION(rgw_num_control_oids, OPT_INT, 8)
OPTION(rgw_num_rados_handles, OPT_U32, 1)
OPTION(rgw_verify_ssl, OPT_BOOL, true) // should http_client try to verify ssl when sent https request
/* The following are tunables for caches of RGW NFS (and other file
* client) objects.

5
src/rgw/rgw_http_client.cc
View File

@ -355,6 +355,11 @@ int RGWHTTPClient::init_request(const char *method, const char *url, rgw_http_re
if (has_send_len) {
curl_easy_setopt(easy_handle, CURLOPT_INFILESIZE, (void *)send_len);
}
if (!verify_ssl) {
curl_easy_setopt(easy_handle, CURLOPT_SSL_VERIFYPEER, 0L);
curl_easy_setopt(easy_handle, CURLOPT_SSL_VERIFYHOST, 0L);
dout(20) << "ssl verification is set to off" << dendl;
}
curl_easy_setopt(easy_handle, CURLOPT_PRIVATE, (void *)req_data);
return 0;

2
src/rgw/rgw_http_client.h
View File

@ -93,7 +93,7 @@ public:
http_status(HTTP_STATUS_NOSTATUS),
req_data(nullptr),
user_info(nullptr),
verify_ssl(true),
verify_ssl(cct->_conf->rgw_verify_ssl),
cct(cct) {
}