Issue #694
pulp-admin should support SNI
Description
Description of problem:
If several SSL vhosts are sharing the same HTTPS port but have different TLS certificates, pulp-admin fails to verify the server's certificate.
Therefor SNI support for the admin client pulp-admin is required.
How reproducible:
Steps to Reproduce:
1. Setup vhosts using the same HTTPS port with different certificates
2. login to pulp
3. enter "pulp-admin repo list"
Actual results:
pulp-admin throws an error, telling the common name does not match peer's name.
+ This bug was cloned from Bugzilla Bug #1191921 +
History
#1
Updated by cduryee over 5 years ago
- Status changed from NEW to ASSIGNED
- Assignee set to cduryee
#2
Updated by cduryee over 5 years ago
I contacted the m2crypto maintainer with a usage question. I will continue on this issue once I hear back.
#3
Updated by cduryee over 5 years ago
upstream bz: https://bugzilla.redhat.com/show_bug.cgi?id=1198728
I was able to get SNI to work for pulp-admin on Fedora 21 by applying the patch in the bz to httpslib.py. Once the upstream BZ is triaged I will close this issue.
#4
Updated by cduryee over 5 years ago
- Status changed from ASSIGNED to 7
upstream BZ is in assigned state, closing this issue.
#5
Updated by bmbouter over 5 years ago
- Status changed from 7 to CLOSED - NOTABUG
#6
Updated by bmbouter over 5 years ago
- Severity changed from Medium to 2. Medium
#7
Updated by bmbouter over 1 year ago
- Tags Pulp 2 added
Please register to edit this issue
.