Bug #27221: SSE encryption does not detect ssl termination in proxy - rgw - Ceph

Actions

Copy link

Bug #27221

closed

SSE encryption does not detect ssl termination in proxy

Added by Casey Bodley over 5 years ago. Updated over 5 years ago.

Status:

Resolved

Priority:

Normal

Assignee:

Casey Bodley

Target version:

% Done:

Source:

Tags:

sse proxy

Backport:

luminous mimic

Regression:

Severity:

3 - minor

Reviewed:

Affected Versions:

ceph-qa-suite:

Pull request ID:

Crash signature (v1):

Crash signature (v2):

Description

Requests using sse encryption are rejected if they aren't received over an ssl connection - but this does not account for cases where a proxy is performing ssl termination. When rgw_crypt_require_ssl is enabled (as by default), the 'Forwarded' and 'X-Forwarded-Proto' headers should be consulted when determining whether the connection is secure.

Related issues 3 (0 open — 3 closed)