Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

(MAINT) SSL Verification extended #504

Merged
merged 5 commits into from
Sep 23, 2024
Merged

Conversation

CoMfUcIoS
Copy link
Contributor

@CoMfUcIoS CoMfUcIoS commented Sep 23, 2024

Summary

  • Changed SSL verification mode to VERIFY_PEER for enhanced security.
  • Added Puppet settings initialization to load necessary certificates.
  • Updated HTTP request to use Puppet's certname and certificate files.
  • Ensured CA file is set for SSL verification.

Checklist

  • 🟢 Spec tests.
  • 🟢 Acceptance tests.

Changes include test coverage?

  • Yes
  • Not needed

Have you updated the documentation?

  • Yes, I've updated the appropriate docs
  • Not needed

- Changed SSL verification mode to VERIFY_PEER for enhanced security.
- Added Puppet settings initialization to load necessary certificates.
- Updated HTTP request to use Puppet's certname and certificate files.
- Ensured CA file is set for SSL verification.
- Fixed incorrect syntax in Net::HTTP initialization.
- Corrected method calls for SSL setup and certificate handling.
- Ensured proper request initialization for RBAC token generation.
- Fixed incorrect reference to Net::HTTPSuccess class in token request error handling.
@CoMfUcIoS CoMfUcIoS requested review from a team as code owners September 23, 2024 10:10
@CoMfUcIoS CoMfUcIoS changed the title Ssl more (MAINT) SSL Verification extended Sep 23, 2024
Corrected the typo in the initialization of Net::HTTP::Post for creating the RBAC token request. This ensures the correct HTTP method is used for the request.
…TTPS connection

Changed the HTTPS connection to use Puppet's certname instead of 'localhost' to ensure proper SSL certificate validation.
Copy link
Member

@ragingra ragingra left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Tested both changes!

@CoMfUcIoS CoMfUcIoS merged commit 9cbef67 into puppetlabs:main Sep 23, 2024
68 checks passed
@CoMfUcIoS CoMfUcIoS deleted the SSLMore branch September 23, 2024 17:24
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants