Project

General

Profile

Actions
Copy link

Bug #32288

closed

Server CA cert not verified for IPA token API call

Added by Lukas Zapletal over 3 years ago. Updated over 3 years ago.

Status:
Closed
Priority:
Normal
Assignee:
Lukas Zapletal
Category:
Security
Target version:
-
Difficulty:
Triaged:
Yes
Bugzilla link:
1948006
Pull request:
https://github.com/theforeman/smart-proxy/pull/787
Fixed in Releases:
Foreman - 2.5.0
Found in Releases:
Red Hat JIRA:

Description

Smart proxy ignores CA server certificate for a HTTPS call to IPA when fetching the token:

https://github.com/theforeman/smart-proxy/blob/88fbc8e67d665e2c3b19acb53b31ff30acf078b7/modules/realm_freeipa/provider.rb#L32-L38

There should be a setting to verify CA cert (enabled by default), an installer option and instructions in our documentation on how to enroll na CA cert into the OS cert store.

This issue was reported by Evgeni Golov, thank you.

Related issues 1 (1 open — 0 closed)

Related to Installer - Feature #32289: Option to toggle IPA API server CA verificationNewActions
Actions
Copy link

Also available in: Atom PDF