Project

General

Custom queries

Profile

Actions

Bug #18040

closed

Certificates with OU= give an error when listing smart-proxy cert list.

Added by Stefan Goethals over 8 years ago. Updated almost 7 years ago.

Status:
Closed
Priority:
Normal
Category:
PuppetCA
Target version:
Difficulty:
Triaged:
Fixed in Releases:
Found in Releases:

Description

When a certificate containing an OU (possibly any other field than CN) is signed. An error occurs when viewing cert list page.

Possibly, the id of the certificate is not parsed correctly and ends up containing a '/' character which is not allowed.

The certificate could be parsed in the manner puppet does it https://github.com/puppetlabs/puppet/blob/master/lib/puppet/util/ssl.rb#L44 to avoid this issue.


Files

Foreman_cert_stack.txt Foreman_cert_stack.txt 20.7 KB Stefan Goethals, 01/12/2017 04:04 AM

Related issues 1 (0 open1 closed)

Has duplicate Foreman - Bug #18240: foreman-proxy reports an error about the mcollective certificateDuplicate01/25/2017Actions

Added by Daniel Lobato Garcia over 8 years ago

Revision 73633f3d (diff)

Fixes #18040 - URL escape PuppetCA CN on proxy view

If the CN contains characters that cannot be displayed in an URL, like
'mcollective/OL=mcollective', the puppetca list will not be able to
render.

The reason is that Rails cannot generate an URL for such CNs, so we need
to convert it into URL-friendly style.

Added by Daniel Lobato Garcia over 8 years ago

Revision 3552acf4 (diff)

Fixes #18040 - URL escape PuppetCA CN on proxy view

If the CN contains characters that cannot be displayed in an URL, like
'mcollective/OL=mcollective', the puppetca list will not be able to
render.

The reason is that Rails cannot generate an URL for such CNs, so we need
to convert it into URL-friendly style.

(cherry picked from commit 73633f3db179f47a582b8ca2f31a9e430c10f4fb)

Actions

Also available in: Atom PDF