Issue #589
closed
Our broker connection settings default to plaintext connections
Description
Description of problem:
In /etc/pulp/server.conf, the two broker connections (for consumers and tasks) both default to plaintext connections, rather than SSL. Users should have to turn security off rather than turn it on.
Version-Release number of selected component (if applicable):
2.4.0
How reproducible:
Every time.
Steps to Reproduce:
1. Configure the message broker not to do SSL.
2. Use Pulp with default broker settings.
Actual results:
Pulp will connect to the message broker and function (including sending authentication information and plaintext messages).
Expected results:
Pulp should only be willing to connect to a broker that uses properly signed SSL certificates by default.
Additional info:
This is a reverse incompatible change and may be worth considering for a major release.
+ This bug was cloned from Bugzilla Bug #1156120 +
.