Project

General

Profile

Bug #31326

'katello-certs-check' should display a warning messages if server.crt contains CN=shortname

Added by Eric Helms over 2 years ago. Updated over 2 years ago.

Status:
Closed
Priority:
Normal
Assignee:
Chris Roberts
Category:
foreman-installer script
Target version:
Foreman - 2.3.0
Difficulty:
Triaged:
Yes
Bugzilla link:
1659506
Pull request:
https://github.com/theforeman/foreman-installer/pull/622, https://github.com/theforeman/foreman-installer/pull/616
Fixed in Releases:
Foreman - 2.3.0
Found in Releases:
Red Hat JIRA:

Description

Description of problem:
'katello-certs-check' succeeds if the server cert has CN=shortname.

We recommend Satellite configuration with FQDN and if customer tries to configure custom certs with short-name it creates lot of issues.

Steps to Reproduce:
1.Gnerate/get certs with satellite's shortname.
2.Perfrom katello-certs-check.

Actual results:
It succeeds.

Expected results:
It should display a warining message.
or
It should fail.

Associated revisions

Revision d215e077 (diff)
Added by Eric Helms over 2 years ago

Fixes #31326: Error in certs check if using only a shortname

Katello requires an FQDN be used for installation and thus the
same requirement exists for any custom certificates being used.
This adds a check that the CN is not set to a shortname, and/or
if using Subject Alt Name that there is not a single SAN that
is a shortname.

History

#1 Updated by The Foreman Bot over 2 years ago

  • Status changed from New to Ready For Testing
  • Pull request https://github.com/theforeman/foreman-installer/pull/616 added

#2 Updated by The Foreman Bot over 2 years ago

  • Fixed in Releases 2.4.0 added

#3 Updated by Eric Helms over 2 years ago

  • Status changed from Ready For Testing to Closed

#4 Updated by Ewoud Kohl van Wijngaarden over 2 years ago

  • Triaged changed from No to Yes
  • Target version set to 2.3.0
  • Category set to foreman-installer script
  • Subject changed from 'katello-certs-check' should display a warning messages if server.crt contains CN=shortname to 'katello-certs-check' should display a warning messages if server.crt contains CN=shortname
  • Fixed in Releases 2.3.0 added
  • Fixed in Releases deleted (2.4.0)

#5 Updated by The Foreman Bot over 2 years ago

  • Pull request https://github.com/theforeman/foreman-installer/pull/622 added

Also available in: Atom PDF