Bug 51510 - Kelvin API app should register UCS CA with aiohttp/requests certification backend
Summary: Kelvin API app should register UCS CA with aiohttp/requests certification bac...
Status: CLOSED FIXED
Alias: None
Product: UCS@school
Classification: Unclassified
Component: HTTP-API (Kelvin)
Version: UCS@school 4.4
Hardware: Other Linux
: P5 normal
Target Milestone: ---
Assignee: Daniel Tröder
QA Contact: Ole Schwiegert
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2020-06-17 00:33 CEST by Daniel Tröder
Modified: 2020-06-17 09:49 CEST (History)
0 users

See Also:
What kind of report is it?: Bug Report
What type of bug is this?: ---
Who will be affected by this bug?: ---
How will those affected feel about the bug?: ---
User Pain:
Enterprise Customer affected?:
School Customer affected?:
ISV affected?:
Waiting Support:
Flags outvoted (downgraded) after PO Review:
Ticket number:
Bug group (optional):
Customer ID:
Max CVSS v3 score:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Daniel Tröder univentionstaff 2020-06-17 00:33:42 CEST 
The Kelvin API manually passes the UCS CAs file path when opening a connection, to prevent SSL certification errors.
A pyhook code using the "self.udm" attribute may encounter such an error anyway.

Register the UCS CA with the aiohttp/requests certification backend (certifi), so that neither the Kelvin API nor Pyhooks can run into SSL certification errors when communicating with the UDM REST API on the Docker host.
Comment 1 Daniel Tröder univentionstaff 2020-06-17 00:37:08 CEST 
This is now done when installing or upgrading the app.

[feature/kelvin a988c5405] Bug #51510: register UCS CA with certifi store
[feature/kelvin 546154a51] Bug #51510: fix appcenter configure script
Comment 2 Daniel Tröder univentionstaff 2020-06-17 00:42:28 CEST 
[feature/kelvin c45e3f025] Bug #51509, Bug #51510: changelog

The updated "configure" script has been uploaded to the test appcenter for version "1.1.1".
Comment 3 Ole Schwiegert univentionstaff 2020-06-17 08:55:23 CEST 
Tests: OK
Functionality: OK
Present in Kelvin 1.1.1: OK
Changelog: OK
Comment 4 Daniel Tröder univentionstaff 2020-06-17 09:49:30 CEST 
Code was released with app version "1.1.1".