Bugzilla will be upgraded to version 5.0. The upgrade date is tentatively scheduled for 2 December 2018, pending final testing and feedback.
Bug 1538895 - [3.6] Invalid entries in namedCertificates when using openshift_master_named_certificates
[3.6] Invalid entries in namedCertificates when using openshift_master_named_...
Status: CLOSED ERRATA
Product: OpenShift Container Platform
Classification: Red Hat
Component: Installer (Show other bugs)
3.6.0
x86_64 Linux
unspecified Severity high
: ---
: 3.6.z
Assigned To: Russell Teague
Johnny Liu
:
Depends On:
Blocks:
  Show dependency treegraph
 
Reported: 2018-01-25 23:18 EST by Russell Teague
Modified: 2018-08-06 08:55 EDT (History)
6 users (show)

See Also:
Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Cause: Alternative names in certificates were not being properly parsed. Consequence: Alternatives with 'email:' were being added as additional hostnames. Fix: Updated the logic to only add alternative names which begin with 'DNS:' Result: Proper parsing and updating of namedCertificates
Story Points: ---
Clone Of: 1502838
Environment:
Last Closed: 2018-04-12 02:01:18 EDT
Type: Bug
Regression: ---
Mount Type: ---
Documentation: ---
CRM:
Verified Versions:
Category: ---
oVirt Team: ---
RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: ---
jupierce: needinfo-


Attachments (Terms of Use)


External Trackers
Tracker ID Priority Status Summary Last Updated
Red Hat Product Errata RHBA-2018:1106 None None None 2018-04-12 02:01 EDT

  None (edit)
Comment 3 Johnny Liu 2018-01-30 04:07:27 EST
Retest this bug with "openshift-ansible-3.6.173.0.101-1.git.0.7c6b77f.el7.noarch, and FAIL.

# cat /etc/origin/master/master-config.yaml
<--snip-->
  namedCertificates:
  - certFile: /etc/origin/master/named_certificates/cloudbeta.rio.gov.br.crt
    keyFile: /etc/origin/master/named_certificates/cloudbeta.rio.gov.br.key
    names:
    - "email:hostmaster@iplanrio.rio.rj.gov.br"
    - "cloudbeta.rio.gov.br"
<--snip-->

Seem like the PR is not landed into the rpm package.
Comment 4 Russell Teague 2018-02-02 11:05:15 EST
Waiting for 3.6 build
Comment 6 Russell Teague 2018-02-15 15:33:49 EST
$ git tag --contains 6be727ca13ca1260333ab7b16636c2ab7a449a70
openshift-ansible-3.6.173.0.103-1
Comment 7 Johnny Liu 2018-02-22 03:22:55 EST
Verified this bug with openshift-ansible-3.6.173.0.104-1.git.0.ee43cc5.el7.noarch, and PASS.

# cat /etc/origin/master/master-config.yaml
<--snip-->
  namedCertificates:
  - certFile: /etc/origin/master/named_certificates/cloudbeta.rio.gov.br.crt
    keyFile: /etc/origin/master/named_certificates/cloudbeta.rio.gov.br.key
    names:
    - "cloudbeta.rio.gov.br"
<--snip-->
Comment 10 errata-xmlrpc 2018-04-12 02:01:18 EDT
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHBA-2018:1106

Note You need to log in before you can comment on or make changes to this bug.