Uploaded image for project: 'OpenShift Bugs'
  1. OpenShift Bugs
  2. OCPBUGS-4983

[backport request] When a certificate subject changes (name, alt names, IPs), the library-go crypto won't update the certificate

    XMLWordPrintable

Details

    • Bug
    • Resolution: Done
    • Major
    • 4.12.0
    • 4.12
    • MicroShift
    • None
    • Critical
    • 1
    • uShift Sprint 230, uShift Sprint 231
    • 2
    • Rejected
    • False
    • Hide

      None

      Show
      None

    Description

      Description of problem:

      When a certificate subject changes (name, alt names, IPs), the library-go crypto won't update the certificate

      Version-Release number of selected component (if applicable):

      4.12

      How reproducible:

      100%

      Steps to Reproduce:

      This is a bug happening in MicroShift that was fixed in master branch, but needs backport to 4.12 branch

https://issues.redhat.com/browse/USHIFT-394
https://issues.redhat.com/browse/USHIFT-573
https://github.com/openshift/library-go/pull/1422

      Attachments

        Issue Links

          is blocked by

          Bug - A problem that impairs or prevents the functions of the product. OCPBUGS-4984 When a certificate subject changes (name, alt names, IPs), the library-go crypto won't update the certificate

          • Blocker - To be worked above all other priorities. This term is chosen when the severity of the issue is very high, has no workaround, or the effort for the change is comparatively low. Issues that may be very publicly visible and could generate significant media attention may also drive a higher priority.
          • Closed
          links to

          GitHub openshift/library-go#1432: OCPBUGS-4983: Regenerate client certificate on subject change

          Activity

            People

              majopela@redhat.com Miguel Angel Ajo Pelayo
              majopela@redhat.com Miguel Angel Ajo Pelayo
              John George John George
              Red Hat Employee
              Votes:
              0 Vote for this issue
              Watchers:
              6 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: