Hide Forgot
Created attachment 1149549 [details] Proposed patch Description of problem: Note this also affects RHEL 6 and I've filed the same bug against it: https://bugzilla.redhat.com/show_bug.cgi?id=1329382 If a user of urllib3 modifies the ``connection_pool_kw`` dictionary on the ``urllib3.poolmanager.PoolManager`` class to change the SSL configuration (client certificate and key, CA certificate bundle, SSL version, and whether or not the server's certificate must be valid), the ``PoolManager`` instance will not consider these new configurations when providing a pooled connection for a request. This results in existing connections that are not configured as the user expects to be used rather than new connections being created. This causes issues like https://github.com/kennethreitz/requests/issues/2863. Version-Release number of selected component (if applicable): All versions equal to or below urllib3 version 1.15.z How reproducible: Easily and reliably reproducible. Steps to Reproduce: 1. See attached Python script - this script attempts to reconfigure the CA bundle used by urllib3. It deletes the old CA file so that if the PoolManager uses the old one, it gets a "No such file or directory error". Doing `python test_urllib3.py` on a version of urllib3 affected by this bug will produce a traceback. Actual results: Old SSL configurations are used. Expected results: New SSL configurations are used. Additional info: The patch for this bug has been accepted upstream, but is not yet in a released version: https://github.com/shazow/urllib3/pull/830 This is an issue Satellite 6 suffers from.
*** Bug 1394919 has been marked as a duplicate of this bug. ***
Created attachment 1242221 [details] test_urllib3.py The script mentioned in Steps to Reproduce. Obtained from the RHEL 6 bug.
Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory, and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://access.redhat.com/errata/RHBA-2017:1884