Project

Profile

Help

Issue #6574

closed

expr= urlencoding is incompatible with Apache 2.6.4 which is the default for Centos7

Added by bmbouter over 4 years ago. Updated over 4 years ago.

Status:
CLOSED - CURRENTRELEASE
Priority:
Normal
Assignee:
Sprint/Milestone:
Start date:
Due date:
Estimated time:
Severity:
2. Medium
Platform Release:
OS:
Triaged:
No
Groomed:
No
Sprint Candidate:
No
Tags:
Sprint:
Sprint 73
Quarter:

Description

Problem

apache didn't introduce the ability to use expr= expressions until 2.6.10. You can see that in the apache 2.4 changelog. This is also confirmed from testing done by @jsherrill, sajha , and myself.

2.6.4 is the current verison of httpd available on Centos7. See the package listing here for confirmation.

This causes pulp-certguard's recommended httpd config to not work. This means pulp-certguard can't use httpd from Centos 7 or RHEL 7 as the reverse proxy. That's a problem for users.

Solutions

Actions #1

Updated by bmbouter over 4 years ago

  • Status changed from NEW to ASSIGNED
  • Assignee set to bmbouter
  • Sprint set to Sprint 72
Actions #2

Updated by bmbouter over 4 years ago

  • Status changed from ASSIGNED to POST
Actions #4

Updated by rchan over 4 years ago

  • Sprint changed from Sprint 72 to Sprint 73

Added by bmbouter over 4 years ago

Revision 9d659883 | View on GitHub

Add Apache < 2.6.10 support

Apache < 2.6.10 cannot urlencode a certificate. As this is the current version shipped on EL7, pulp-certguard should work with that out of the box. This PR does the following:

  • Adds support to detect this situation and re-assemble the certificate for openssl to validate instead of url decoding it.
  • Adds docs for the < 2.6.10 reverse proxy config
  • Adds a tests for these situations

This PR also adds some debug statements and docs on how to use them.

https://pulp.plan.io/issues/6574 closes #6574

Actions #5

Updated by bmbouter over 4 years ago

  • Status changed from POST to MODIFIED
Actions #6

Updated by bmbouter over 4 years ago

  • Sprint/Milestone set to 1.0.0 Release
Actions #7

Updated by bmbouter over 4 years ago

  • Status changed from MODIFIED to CLOSED - CURRENTRELEASE

Also available in: Atom PDF