Issue #6694
closed
RHSM CertGuard needs to only verify the path of the Distribution.base_path
Status:
CLOSED - CURRENTRELEASE
Description
Problem¶
Currently the RHSMCertGuard checks the full path which includes the /pulp/content/
Katello's certs disinclude the /pulp/content/ in their entitlement certs.
Solution¶
Have RHSMCertGuard only perform path checking on the Distribution.base_path
- Project changed from Pulp to CertGuard
- Triaged changed from No to Yes
- Sprint set to Sprint 72
- Sprint changed from Sprint 72 to Sprint 73
- Status changed from NEW to ASSIGNED
- Assignee set to bmbouter
- Status changed from ASSIGNED to POST
- Status changed from POST to MODIFIED
- Sprint/Milestone set to 1.0.0 Release
- Status changed from MODIFIED to CLOSED - CURRENTRELEASE
Also available in: Atom
PDF
.
Adjust RHSM cert checking to only use base_path
The
RHSMCertGuardwas requiring thesettings.CONTENT_PATH_PREFIXto also be one of the authorized urls in the certificate. This is not desirable due to compatability with a huge number of certificates already deployed to clients.This PR removes the
settings.CONTENT_PATH_PREFIXfrom therequest.pathsoRHSMCertGuardauthorization check. Now only theDistribution.base_pathis expected in the client RHSM certificate.The test are also updated with new certificates and base_paths due to authorized urls changing for RHSMCertGuard.
https://pulp.plan.io/issues/6694 closes #6694