Note: This bug is displayed in read-only format because the product is no longer active in Red Hat Bugzilla.

Bug 2030533

Summary: graph-builder's www-authenticate parsing is case sensitive, while RFC 7235 calls for case-insensitive auth-schemes
Product: OpenShift Container Platform Reporter: Lalatendu Mohanty <lmohanty>
Component: OpenShift Update ServiceAssignee: Over the Air Updates <aos-team-ota>
OpenShift Update Service sub component: operand QA Contact: Yang Yang <yanyang>
Status: CLOSED ERRATA Docs Contact: Kathryn Alexander <kalexand>
Severity: high    
Priority: high CC: bleanhar, kalexand, lmohanty, mfiedler, ndabhi, oarribas, openshift-bugs-escalate, pmahajan, vrutkovs, wking, yanyang
Version: 4.6   
Target Milestone: ---   
Target Release: 4.9.z   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Cause: OSUS was using case-sensitive header parsing Consequence: Nexus registry could not be used as a source for OSUS image Fix: OSUS is using case-insentive parsing of authentication header Result: Nexus registry headers are correctly parsed and can be used as source of openshift release images for OSUS
Story Points: ---
Clone Of: 2008125 Environment:
Last Closed: 2022-02-25 00:52:55 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On: 2008125    
Bug Blocks:    

Comment 1 Lalatendu Mohanty 2022-01-31 21:40:44 UTC
https://github.com/openshift/cincinnati/pull/641 is already merged. So moving this to modified.

Comment 5 Yang Yang 2022-02-10 02:14:28 UTC
Verifying with cincinnati-container-v4.9.0-8, cincinnati-operator-bundle-container-v4.9.0-11, cincinnati-operator-container-v4.9.0-9. OSUS installation passed on quay registry. So moving it to verified state.

Comment 7 errata-xmlrpc 2022-02-25 00:52:55 UTC
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory (RHEA: OSUS enhancement update), and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHBA-2022:0681