Project

Profile

Help

Task #6224

Syncing against a pulp with S3 set up causes SSL error

Added by daviddavis 7 months ago. Updated about 1 month ago.

Status:
NEW
Priority:
Normal
Assignee:
-
Category:
-
Sprint/Milestone:
-
Start date:
Due date:
% Done:

0%

Estimated time:
Platform Release:
Groomed:
No
Sprint Candidate:
No
Tags:
Documentation
Sprint:
Quarter:

Description

In Automation Hub, we're syncing against a remote server using a ca cert. The remote server redirects to an S3 location which throws a SSLCertVerificationError. It appears that when setting a remote ca_cert[0], the system ca is ignored.

Talking with bmbouter, we think this is the correct behavior but it should be documented that setting a ca_cert on remote will cause the system ca cert to be ignored.

Also, we should also add a note such as "When syncing from a Pulp that has S3 set up (or any Remote that redirects to a different domain with a different cert), the CA chain will need to include all necessary certs."

[0] https://github.com/pulp/pulpcore/blob/bcbe95319d66772070a44ca5bd0987e712b93099/pulpcore/download/factory.py#L84-L85

History

#1 Updated by daviddavis 7 months ago

  • Tags Documentation added

#2 Updated by daviddavis 7 months ago

  • Subject changed from Syncing against a pulp with S3 set up causes error to Syncing against a pulp with S3 set up causes SSL error

#3 Updated by fao89 7 months ago

  • Tracker changed from Issue to Task
  • % Done set to 0
  • Sprint set to Sprint 67

#4 Updated by rchan 7 months ago

  • Sprint changed from Sprint 67 to Sprint 68

#5 Updated by rchan 6 months ago

  • Sprint changed from Sprint 68 to Sprint 69

#6 Updated by rchan 6 months ago

  • Sprint changed from Sprint 69 to Sprint 70

#7 Updated by rchan 5 months ago

  • Sprint changed from Sprint 70 to Sprint 71

#8 Updated by rchan 5 months ago

  • Sprint changed from Sprint 71 to Sprint 72

#9 Updated by rchan 4 months ago

  • Sprint changed from Sprint 72 to Sprint 73

#10 Updated by rchan 4 months ago

  • Sprint changed from Sprint 73 to Sprint 74

#11 Updated by rchan 4 months ago

  • Sprint changed from Sprint 74 to Sprint 75

#12 Updated by rchan 3 months ago

  • Sprint changed from Sprint 75 to Sprint 76

#13 Updated by rchan 3 months ago

  • Sprint changed from Sprint 76 to Sprint 77

#14 Updated by rchan about 2 months ago

  • Sprint changed from Sprint 77 to Sprint 78

#15 Updated by rchan about 2 months ago

  • Sprint changed from Sprint 78 to Sprint 79

#16 Updated by daviddavis about 2 months ago

  • Description updated (diff)

#17 Updated by daviddavis about 1 month ago

  • Sprint deleted (Sprint 79)

Please register to edit this issue

Also available in: Atom PDF