Uploaded image for project: 'OpenShift Request For Enhancement'
  1. OpenShift Request For Enhancement
  2. RFE-5505

check custom ingress certificate format before applying the changes

XMLWordPrintable

    • Icon: Feature Request Feature Request
    • Resolution: Done
    • Icon: Undefined Undefined
    • None
    • None
    • Auth
    • None
    • False
    • None
    • False
    • Not Selected

      1. Proposed title of this feature request

      check custom ingress certificate format before applying the changes

      2. What is the nature and description of the request?

      Check if the format of the Ingress Custom certificate is valid to be applied in the Authentication and Console.
      There has been issue, where the Certificate is missing a new line at the end of the file, causing that the Certificate and Private key will be added together not on the new line.
      Example (note that this is just example)

      End Certificate  ---  Private Key
      

      This causes Authentication Operator status to go degraded and authentication application will fail with error:

      F0507 16:38:08.509428       1 cmd.go:56] failed to load SNI cert and key: tls: failed to find PEM block with type ending in "PRIVATE KEY" in key input after skipping PEM blocks of the following types: [CERTIFICATE CERTIFICATE]
      

      Requesting the operator will process the certificate and collocate the Certificate and Private key in the correct format.
      Something like:

      # cat tls.crt | openssl x509 
      

      Where the `openssl x509` will format it correctly and add the new line at the end of the file.

      3. Why does the customer need this? (List the business requirements here)

      • The issue causes the problem with accessing the cluster through console, as Authentication application won't start correctly (check the error message above).
      • Manual intervention is needed to resolve the issue.

      4. List any affected packages or components.

      • ingress
      • authentication
      • console

            atelang@redhat.com Anjali Telang
            rhn-support-vwalek Vladislav Walek
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

              Created:
              Updated:
              Resolved: