Bug #8301
Add a checker script for reverse DNS
Difficulty:
Triaged:
No
Description
Since the smart-proxy checks reverse DNS of incoming HTTPS requests, for a wrongly configured box this can fail and installer fails with "Can't register the proxy".
We should add a checker that will refuse to continue if reverse check does not match. I think Katello installer already does the check, we can adopt this bit from there.
Related issues
Associated revisions
History
#1
Updated by Dominic Cleal over 8 years ago
- Related to Bug #7822: CVE-2014-3691 - Smart proxy doesn't perform verification of client SSL certificate on API requests added
#2
Updated by Dominic Cleal over 8 years ago
- Category set to foreman-installer script
#3
Updated by The Foreman Bot over 5 years ago
- Assignee set to Chris Roberts
- Status changed from New to Ready For Testing
- Pull request https://github.com/theforeman/foreman-installer/pull/255 added
#4
Updated by Chris Roberts over 5 years ago
- % Done changed from 0 to 100
- Status changed from Ready For Testing to Closed
Applied in changeset 35b7ee22c10f199507425e379766678e828ca6c4.
Fixes #8301 - Add forward/reverse dns check