Project

General

Profile

Actions

Bug #2151

closed

Issues with SSL verification of proxies

Added by Dominic Cleal about 11 years ago. Updated about 11 years ago.

Status:
Closed
Priority:
Normal
Assignee:
Category:
Authentication
Target version:
Difficulty:
Triaged:
Fixed in Releases:
Found in Releases:

Description

Some issues thrown up during testing of #2121:

  • support DN instead of only CN, since nginx can't pass just the CN
  • empty CN shouldn't be accepted
  • change from rDNS of request IP to forward DNS of smart proxies?
  • support headers instead of env vars?

Related issues 1 (0 open1 closed)

Related to Foreman - Bug #2121: Unauthenticated YAML fact and reports importers can be exploitedClosedDominic Cleal01/09/2013Actions
Actions #1

Updated by Dominic Cleal about 11 years ago

  • Status changed from New to Ready For Testing
  • Target version set to 1.1

https://github.com/theforeman/foreman/pull/389

I was going to change the rDNS scheme as well, but decided that I'll mention it in my e-mail to foreman-users to get feedback (will send as soon as the installer PR's merged).

Actions #2

Updated by Dominic Cleal about 11 years ago

  • Status changed from Ready For Testing to Closed
  • % Done changed from 0 to 100
Actions

Also available in: Atom PDF