diff --git a/doc/source/configuring.rst b/doc/source/configuring.rst index b401c6b009..e3567cd7b5 100644 --- a/doc/source/configuring.rst +++ b/doc/source/configuring.rst @@ -692,6 +692,15 @@ Can only be specified in configuration files. `This option is specific to the Swift storage backend.` +* ``swift_store_cacert`` + +Can only be specified in configuration files. + +Optional. Default: ``None`` + +A string giving the path to a CA certificate bundle that will allow Glance's +services to perform SSL verification when communicating with Swift. + Optional. Default: True. If set to False, disables SSL layer compression of https swift diff --git a/etc/glance-api.conf b/etc/glance-api.conf index c35340f092..3ab9b38569 100644 --- a/etc/glance-api.conf +++ b/etc/glance-api.conf @@ -615,6 +615,10 @@ swift_store_endpoint = None # Bypass SSL verification for Swift #swift_store_auth_insecure = False +# The path to a CA certificate bundle file to use for SSL verification when +# communicating with Swift. +#swift_store_cacert = + # ============ S3 Store Options ============================= # Address where the S3 authentication service lives diff --git a/etc/glance-cache.conf b/etc/glance-cache.conf index 419ff6a3f1..41941ca020 100644 --- a/etc/glance-cache.conf +++ b/etc/glance-cache.conf @@ -144,6 +144,10 @@ swift_store_endpoint = None # Bypass SSL verification for Swift #swift_store_auth_insecure = False +# The path to a CA certificate bundle file to use for SSL verification when +# communicating with Swift. +#swift_store_cacert = + # ============ S3 Store Options ============================= # Address where the S3 authentication service lives