Issue #694
closed
pulp-admin should support SNI
Description
Description of problem:
If several SSL vhosts are sharing the same HTTPS port but have different TLS certificates, pulp-admin fails to verify the server's certificate.
Therefor SNI support for the admin client pulp-admin is required.
How reproducible:
Steps to Reproduce:
1. Setup vhosts using the same HTTPS port with different certificates
2. login to pulp
3. enter "pulp-admin repo list"
Actual results:
pulp-admin throws an error, telling the common name does not match peer's name.
+ This bug was cloned from Bugzilla Bug #1191921 +
Updated by cduryee about 9 years ago
- Status changed from NEW to ASSIGNED
- Assignee set to cduryee
Updated by cduryee about 9 years ago
I contacted the m2crypto maintainer with a usage question. I will continue on this issue once I hear back.
Updated by cduryee about 9 years ago
upstream bz: https://bugzilla.redhat.com/show_bug.cgi?id=1198728
I was able to get SNI to work for pulp-admin on Fedora 21 by applying the patch in the bz to httpslib.py. Once the upstream BZ is triaged I will close this issue.
Updated by cduryee about 9 years ago
- Status changed from ASSIGNED to 7
upstream BZ is in assigned state, closing this issue.
Updated by bmbouter almost 4 years ago
- Category deleted (
14)
We are removing the 'API' category per open floor discussion June 16, 2020.
.