Project

General

Custom queries

Profile

Actions
Copy link

Bug #29931

closed

Root repository upstream password saved in clear text

Added by Piyush Tiwari almost 5 years ago. Updated over 4 years ago.

Status:
Closed
Priority:
Normal
Assignee:
Piyush Tiwari
Category:
Repositories
Target version:
Katello 3.16.0
Difficulty:
Triaged:
Yes
Bugzilla link:
1630536
Pull request:
https://github.com/Katello/katello/pull/8729
Fixed in Releases:
Katello 4.0.0
Found in Releases:
Red Hat JIRA:

Subtasks 1 (0 open — 1 closed)

Bug #28112: yum repos password stored as cleartext in auditsClosedActions

Related issues 1 (0 open — 1 closed)

Related to Katello - Bug #30064: RootRepository password length too shortClosedIan BallouActions
Actions
Copy link
 #2

Updated by Partha Aji almost 5 years ago

The upstream_password for root_repository is stored in clear text in the database. This password needs to be encrypted.

Look at https://github.com/theforeman/foreman/blob/develop/app/models/http_proxy.rb#L10 for example on how to do that (think we have to just include Encryptable and encrypts)

Actions
Copy link
 #6

Updated by Piyush Tiwari almost 5 years ago

  • Status changed from Ready For Testing to Closed
Actions
Copy link

Also available in: Atom PDF