Bug 24094
| Summary: | univention-certificate sollte auf Backup auf Master verweisen | ||
|---|---|---|---|
| Product: | UCS | Reporter: | Moritz Muehlenhoff <jmm> |
| Component: | SSL | Assignee: | Philipp Hahn <hahn> |
| Status: | CLOSED FIXED | QA Contact: | Janek Walkenhorst <walkenhorst> |
| Severity: | normal | ||
| Priority: | P5 | CC: | hahn |
| Version: | UCS 3.0 | ||
| Target Milestone: | UCS 4.1-2-errata | ||
| Hardware: | Other | ||
| OS: | Linux | ||
| What kind of report is it?: | --- | What type of bug is this?: | --- |
| Who will be affected by this bug?: | --- | How will those affected feel about the bug?: | --- |
| User Pain: | Enterprise Customer affected?: | ||
| School Customer affected?: | ISV affected?: | ||
| Waiting Support: | Flags outvoted (downgraded) after PO Review: | ||
| Ticket number: | Bug group (optional): | ||
| Max CVSS v3 score: | |||
*** Bug 6068 has been marked as a duplicate of this bug. *** r70558 | Bug #24094 ssl: Allow univention-certificate only on DC Master (or Backup) Package: univention-ssl Version: 10.0.0-11.168.201606230839 Version: 10.0.0-12.169.201606231402 Branch: ucs_4.1-0 Scope: errata4.1-2 r70577 | Bug #31369,Bug #39257,Bug #24094,Bug #40498,Bug #25285,Bug #35748: ssl YAML univention-ssl.yaml r70643 | Bug #24094 SSL: Fix unit test r70652 | Bug #24094 SSL: Disable unit test Broke UDL restart, but disabled for now Package: univention-ssl Version: 10.0.0-15.172.201606271746 Branch: ucs_4.1-0 Scope: errata4.1-2 <http://jenkins.knut.univention.de:8080/job/UCS-4.1/job/UCS-4.1-2/job/AutotestJoin/65/SambaVersion=s4,Systemrolle=backup/testReport/01_base/81alternativessl/test/> r70693 | Bug #24094 test: Restrict 01/81ssl to DC master Package: ucs-test Version: 6.0.33-81.1493.201606291004 Branch: ucs_4.1-0 Scope: errata4.1-2 Code review: OK Tests: OK Advisory: OK |
Die Doku enthält aktuell folgenden Hinweis: \ucsExclamation\ucsAttention{Die CA wird nur vom \ucsMaster{} zum \ucsBackup{} synchronisiert und nicht umgekehrt. Es sollte also ausschließlich die CA auf dem \ucsMaster{} verwendet werden.} univention-certificate sollte server/role auslesen und eine entsprechende Warnung ausgeben.