Uploaded image for project: 'OpenShift Service Mesh'
  1. OpenShift Service Mesh
  2. OSSM-1094

Htpasswd secret created in control plane namespace is using SHA1

    XMLWordPrintable

Details

    • Sprint 59, Sprint 60, Sprint 61, Sprint 62

    Description

      After installing the service mesh the secret in control namespace is is stored using sha1

      [quicklab@upi-0 ~]$ oc get secrets
      NAME TYPE DATA AGE

      htpasswd Opaque 2 52d

      [quicklab@upi-0 ~]$ oc get secret -n istio-system htpasswd -o json | jq .data.auth | tr -d \" | base64 -d | sed 's/}.*/}REDACTED\n/'
      internal:

      {SHA}

      REDACTED

      The SHA indicates SHA-1. In modern best practices, SHA-1 is deprecated and shouldn't be used. We have a request from customer for upgrading SHA-1

      Attachments

        Activity

          People

            rh-ee-cgarriso Cameron Garrison
            rhn-support-atn Anand T N (Inactive)
            Votes:
            0 Vote for this issue
            Watchers:
            9 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved: