cloudfoundry-attic / cf-riak-cs-broker Goto Github PK

When using the cf-riak-cs-broker with a CF that is behind a load balancer using TLS Server Name Indication, and multiple certs on a single VIP, the broker code cannot verify certs properly. I think this is due to using an old version of Excon:

excon/excon@b5cc2fa

Could this be updated and some testing be done to ensure this supports TLS SNI?

Hi, this may be more a design question than an issue, but here goes:
I'm making a service broker for the S3 compatible layer on top of Ceph. Obviously, I've been looking very closely at your broker. The way this broker returns a uri in credentials has me wondering. Credentials look something like this:

    "credentials": {
      "access_key_id": "access-key",
      "secret_access_key": "secret-key",
      "uri": "http://access-key:secret-key@host/service-instance-some_guid"
    },

If you try to use this uri, it won't work. Because this syntax is for basic authentication. AWS authentication is different. So if you try to curl an object you stored by appending the object key to the uri, it fails.

Do you think it would be better to leave the key material out of the uri?

Regards
Jon
Jon Kåre Hellan, UNINETT AS, Trondheim, Norway