Project

General

Profile

Actions

Bug #8527

closed

Proxy SSL verification fails with rest-client 1.7 and rbovirt's rest-client extensions

Added by Dominic Cleal about 10 years ago. Updated over 6 years ago.

Status:
Closed
Priority:
High
Assignee:
Category:
Smart Proxy
Target version:
Difficulty:
Triaged:
Fixed in Releases:
Found in Releases:

Description

Since #7233, when Foreman is installed with rest-client 1.7 and oVirt support, SSL connections to the smart proxy fail to verify.

ERF12-2749 [ProxyAPI::ProxyException]: Unable to get environments from Puppet ([OpenSSL::SSL::SSLError]: SSL_connect returned=1 errno=0 state=SSLv3 read server certificate B: certificate verif...) for proxy https://foreman-trusty.example.com:8443/puppet"

It appears that the rest-client extensions that are added in rbovirt cause some sort of conflict. These extensions aren't needed on rest-client 1.7 and above, as the patch was merged, but they're added anyway.

https://github.com/abenari/rbovirt/blob/v0.0.30/lib/restclient_ext/request.rb

If I comment out the require for restclient_ext, the SSL comms between Foreman and the proxy work fine.

Actions

Also available in: Atom PDF