Comment 6 for bug 802950

Revision history for this message
Clint Byrum (clint-fewbar) wrote : Re: [Bug 802950] Re: no gui visible in unity

Excerpts from Duncan McGreggor's message of Fri Mar 23 04:04:39 UTC 2012:
> Kate, Clint -- would you guys be interested in a new release of txAWS
> for Precise?
>
> If so, when should we create one? (seems like, at the earliest, when
> Client's branch gets merged...)
>

Hi Duncan. I just now noticed that we don't have SSL endpoint certificate
verification in the current release of txaws (0.2). I see that it landed
in trunk a few months ago.

That makes any use of txaws fairly suspect, since you could be talking
to a MITM ec2 proxy that is intercepting your credentials, userdata,
etc. etc.

So yes, I think it would be quite important for us to have that available
for juju. In fact I may just isolate that as a patch for precise if we
can't get all of 0.3 in.