Bug 53408 – make UCS SSL CA accessible in ID Broker

Bug 53408 - make UCS SSL CA accessible in ID Broker


Summary:	make UCS SSL CA accessible in ID Broker

Status:	VERIFIED FIXED

Product:	Components
Classification:	Unclassified
Component:	ucsschool-apis
Version:	unspecified
Hardware:	Other Linux

Importance:	P5 normal (vote)
Target Milestone:	---
Assigned To:	Daniel Tröder
QA Contact:	Ole Schwiegert

URL:
Keywords:

Depends on:
Blocks:
	Show dependency tree / graph

Reported:	2021-06-06 13:31 CEST by Daniel Tröder
Modified:	2021-06-08 21:57 CEST (History)
CC List:	1 user (show)

See Also:
What kind of report is it?:	Bug Report
What type of bug is this?:	2: Improvement: Would be a product improvement
Who will be affected by this bug?:	1: Will affect a very few installed domains
How will those affected feel about the bug?:	1: Nuisance – not a big deal but noticeable
User Pain:	0.011
Enterprise Customer affected?:
School Customer affected?:
ISV affected?:
Waiting Support:
Flags outvoted (downgraded) after PO Review:
Ticket number:
Bug group (optional):
Max CVSS v3 score:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.

Description Daniel Tröder

2021-06-06 13:31:31 CEST

For the UCS SSL CA to be usable by Python software, it must be imported in the certificate store.

Comment 1 Daniel Tröder

2021-06-06 20:44:26 CEST

The UCS domains certificates can now be used from within the Docker container.

[oschwieg/v1 78528dc] Bug #53408: make UCS SSL CA usable from Python

Comment 2 Daniel Tröder

2021-06-07 09:41:52 CEST

I changed the "README.md" and "example_settings.json" of the "bettermarks-api-plugin":

[main e221ce9] Bug #53408: verify Kelvin SSL certificate

and the "id-broker-plugin":

[main 7f8d385] Bug #53408: verify Kelvin SSL certificate

to enable the verification of the SSL certificate.

Comment 3 Ole Schwiegert

2021-06-08 08:04:58 CEST

Looks good,

can be merged and build as new docker image

Comment 4 Ole Schwiegert

2021-06-08 09:14:32 CEST

Addendum: Also here the joinscript version does not need to be incremented, since the App was never released yet.

Comment 5 Daniel Tröder

2021-06-08 17:10:51 CEST

* Fixed join script version.
* Merged oschwieg/v1 into main.

[main] 9a9c260 Bug #53408: make UCS SSL CA usable from Python

Comment 6 Ole Schwiegert

2021-06-08 21:55:13 CEST

Joinscript version on 1: OK
cert imported: OK