Project

Profile

Help

Task #6810

Updated by pulpbot over 2 years ago

 

 **Ticket moved to GitHub**: "pulp/pulp-certguard/141":https://github.com/pulp/pulp-certguard/issues/141 




 ---- 


 It's possible to have a Pulp Remote, e.g. [FileRemote](https://docs.pulpproject.org/restapi.html#operation/remotes_file_file_create) sync from a CertGaurd protected repo. This should work with either RHSM or X509 Certificate as long as the header is right. 

 We need to add a test that does the following: 

 ### Setup parts of the test 
 1. Create a FileRepository and sync some content into it 
 2. Create a Publication from (1) and serve it at a FileDistribution 

 ### Test sync when it's unprotected  
 3. Create a FileRemote and a second repository and sync the FileDistribution from (2) with it 

 ### Test sync fails against protected repo without cert_key and client_key 

 4. Protect this content with an X509 certificate 
 5. Try to sync the second repo using the FileRemote and assert that it fails with a 403 error (because the FileRemote has no client_cert and client_key) 

 ### Test sync works when FileRemote has client_cert and client_key 
 6. Add the client_cert and client_key to the FileRemote from (3) 
 7. Sync the second repo once more and assert it passes

Back