Red Hat Bugzilla – Bug 867564
RFE: Need to ensure content certificate can only be used on RHUI Consumer it was generated for.
Last modified: 2017-08-04 15:37:26 EDT
Description of problem:
Currently, you can register a RHUI consumer @ access.redhat.com, consume a RHUI subscription, and download a content certificate. There is no protection to ensure that this certificate is not used to download content to multiple RHUAs. We need to somehow tie this certificate to a particular RHUA. Is the consumer identity embedded in the certificate?
Filed at the request of cmorgan.
Punting to next release.