Project

General

Profile

Bug #8301

Add a checker script for reverse DNS

Added by Lukas Zapletal over 8 years ago. Updated over 5 years ago.

Status:
Closed
Priority:
Normal
Assignee:
Chris Roberts
Category:
foreman-installer script
Target version:
-
Difficulty:
Triaged:
No
Bugzilla link:
Pull request:
https://github.com/theforeman/foreman-installer/pull/255
Fixed in Releases:
Found in Releases:
Red Hat JIRA:

Description

Since the smart-proxy checks reverse DNS of incoming HTTPS requests, for a wrongly configured box this can fail and installer fails with "Can't register the proxy".

We should add a checker that will refuse to continue if reverse check does not match. I think Katello installer already does the check, we can adopt this bit from there.

Related issues

Related to Smart Proxy - Bug #7822: CVE-2014-3691 - Smart proxy doesn't perform verification of client SSL certificate on API requestsClosed2014-10-06

Associated revisions

Revision 35b7ee22 (diff)
Added by Chris Roberts over 5 years ago

Fixes #8301 - Add forward/reverse dns check

History

#1 Updated by Dominic Cleal over 8 years ago

  • Related to Bug #7822: CVE-2014-3691 - Smart proxy doesn't perform verification of client SSL certificate on API requests added

#2 Updated by Dominic Cleal over 8 years ago

  • Category set to foreman-installer script

#3 Updated by The Foreman Bot over 5 years ago

  • Assignee set to Chris Roberts
  • Status changed from New to Ready For Testing
  • Pull request https://github.com/theforeman/foreman-installer/pull/255 added

#4 Updated by Chris Roberts over 5 years ago

  • % Done changed from 0 to 100
  • Status changed from Ready For Testing to Closed

Also available in: Atom PDF