Project

General

Profile

Actions
Copy link

Bug #22598

closed

Satellite 6: katello-certs-check does not ensures certificate has SubjectAltName

Added by Chris Roberts almost 7 years ago. Updated over 6 years ago.

Status:
Closed
Priority:
Normal
Assignee:
Chris Roberts
Category:
Installer
Target version:
Katello 3.7.0
Difficulty:
easy
Triaged:
Bugzilla link:
1493186
Pull request:
https://github.com/Katello/katello-installer/pull/591, https://github.com/Katello/katello-installer/pull/632
Fixed in Releases:
Found in Releases:
Red Hat JIRA:

Description

Description of problem:
katello-certs-check does not ensures certificate has SubjectAltName. SubjectAltName is required in order to the browser accept the certificate.

Version-Release number of selected component (if applicable):
Satellite 6.2.11

How reproducible:
100% always

Steps to Reproduce:
1. Create a certificate following the steps depicted in
https://access.redhat.com/documentation/en-us/red_hat_satellite/6.2/html-single/installation_guide/index#configuring_satellite_server_with_custom_server_certificate
2. Import the Certificate

Actual results:
SSL session fails

Expected results:
katello-certs-check should check for the SubjectAltName and bar the certificate import.

Actions
Copy link

Also available in: Atom PDF