Project

General

Profile

Bug #22598

Satellite 6: katello-certs-check does not ensures certificate has SubjectAltName

Added by Chris Roberts over 3 years ago. Updated about 3 years ago.

Status:
Closed
Priority:
Normal
Assignee:
Category:
Installer
Target version:
Difficulty:
easy
Triaged:
Bugzilla link:

Description

Description of problem:
katello-certs-check does not ensures certificate has SubjectAltName. SubjectAltName is required in order to the browser accept the certificate.

Version-Release number of selected component (if applicable):
Satellite 6.2.11

How reproducible:
100% always

Steps to Reproduce:
1. Create a certificate following the steps depicted in
https://access.redhat.com/documentation/en-us/red_hat_satellite/6.2/html-single/installation_guide/index#configuring_satellite_server_with_custom_server_certificate
2. Import the Certificate

Actual results:
SSL session fails

Expected results:
katello-certs-check should check for the SubjectAltName and bar the certificate import.

Associated revisions

Revision ca1b8374 (diff)
Added by Chris Roberts over 3 years ago

Fixes #22598 - add san check

Revision 4c35334a (diff)
Added by Jared Jennings about 3 years ago

Fixes #22598 - add check for key usage Key Encipherment

History

#1 Updated by The Foreman Bot over 3 years ago

  • Status changed from New to Ready For Testing
  • Pull request https://github.com/Katello/katello-installer/pull/591 added

#2 Updated by Chris Roberts over 3 years ago

  • % Done changed from 0 to 100
  • Status changed from Ready For Testing to Closed

#3 Updated by The Foreman Bot about 3 years ago

  • Pull request https://github.com/Katello/katello-installer/pull/632 added

Also available in: Atom PDF