Project

General

Profile

Bug #22418

RGW doesn't check time skew in auth v4 http header request

Added by 芽亮 豆 over 1 year ago. Updated about 1 year ago.

Status:
Resolved
Priority:
Normal
Assignee:
-
Target version:
Start date:
12/13/2017
Due date:
% Done:

0%

Source:
Tags:
RGW
Backport:
luminous
Regression:
No
Severity:
3 - minor
Reviewed:
Affected Versions:
ceph-qa-suite:
Pull request ID:

Description

In auth v4 http header request, RGW doesn't check time skew, while AWS does.


Related issues

Copied to rgw - Backport #22766: luminous: RGW doesn't check time skew in auth v4 http header request Resolved

History

#1 Updated by Radoslaw Zarzynski over 1 year ago

  • Status changed from New to In Progress

#2 Updated by Casey Bodley about 1 year ago

  • Status changed from In Progress to Testing

#3 Updated by Yuri Weinstein about 1 year ago

Radoslaw Zarzynski wrote:

https://github.com/ceph/ceph/pull/19476 by Bingyin Zhang.

merged

#4 Updated by Yehuda Sadeh about 1 year ago

  • Status changed from Testing to Pending Backport
  • Backport set to luminous

#5 Updated by Casey Bodley about 1 year ago

additional cleanup in https://github.com/ceph/ceph/pull/20013 can be backported as well

#6 Updated by Nathan Cutler about 1 year ago

  • Copied to Backport #22766: luminous: RGW doesn't check time skew in auth v4 http header request added

#7 Updated by Nathan Cutler about 1 year ago

  • Status changed from Pending Backport to Resolved

Also available in: Atom PDF