Bug #31326
'katello-certs-check' should display a warning messages if server.crt contains CN=shortname
Status:
Closed
Priority:
Normal
Assignee:
Category:
foreman-installer script
Target version:
Difficulty:
Triaged:
Yes
Bugzilla link:
Description
Description of problem:
'katello-certs-check' succeeds if the server cert has CN=shortname.
We recommend Satellite configuration with FQDN and if customer tries to configure custom certs with short-name it creates lot of issues.
Steps to Reproduce:
1.Gnerate/get certs with satellite's shortname.
2.Perfrom katello-certs-check.
Actual results:
It succeeds.
Expected results:
It should display a warining message.
or
It should fail.
Associated revisions
History
#1
Updated by The Foreman Bot over 2 years ago
- Status changed from New to Ready For Testing
- Pull request https://github.com/theforeman/foreman-installer/pull/616 added
#2
Updated by The Foreman Bot over 2 years ago
- Fixed in Releases 2.4.0 added
#3
Updated by Eric Helms over 2 years ago
- Status changed from Ready For Testing to Closed
Applied in changeset installer|d215e0776c583fe68e8f23f936c4f8ed440b47f4.
#4
Updated by Ewoud Kohl van Wijngaarden over 2 years ago
- Triaged changed from No to Yes
- Target version set to 2.3.0
- Category set to foreman-installer script
- Subject changed from 'katello-certs-check' should display a warning messages if server.crt contains CN=shortname to 'katello-certs-check' should display a warning messages if server.crt contains CN=shortname
- Fixed in Releases 2.3.0 added
- Fixed in Releases deleted (
2.4.0)
#5
Updated by The Foreman Bot over 2 years ago
- Pull request https://github.com/theforeman/foreman-installer/pull/622 added
Fixes #31326: Error in certs check if using only a shortname
Katello requires an FQDN be used for installation and thus the
same requirement exists for any custom certificates being used.
This adds a check that the CN is not set to a shortname, and/or
if using Subject Alt Name that there is not a single SAN that
is a shortname.