Project

Profile

Help

Task #6224

closed

Syncing against a pulp with S3 set up causes SSL error

Added by daviddavis about 4 years ago. Updated about 2 years ago.

Status:
CLOSED - DUPLICATE
Priority:
Normal
Assignee:
-
Category:
-
Sprint/Milestone:
-
Start date:
Due date:
% Done:

0%

Estimated time:
Platform Release:
Groomed:
No
Sprint Candidate:
No
Tags:
Documentation
Sprint:
Quarter:

Description

Ticket moved to GitHub: "pulp/pulpcore/1868":https://github.com/pulp/pulpcore/issues/1868


In Automation Hub, we're syncing against a remote server using a ca cert. The remote server redirects to an S3 location which throws a SSLCertVerificationError. It appears that when setting a remote ca_cert[0], the system ca is ignored.

Talking with bmbouter, we think this is the correct behavior but it should be documented that setting a ca_cert on remote will cause the system ca cert to be ignored.

Also, we should also add a note such as "When syncing from a Pulp that has S3 set up (or any Remote that redirects to a different domain with a different cert), the CA chain will need to include all necessary certs."

[0] https://github.com/pulp/pulpcore/blob/bcbe95319d66772070a44ca5bd0987e712b93099/pulpcore/download/factory.py#L84-L85

Also available in: Atom PDF