Project

General

Profile

Actions
Copy link

Bug #22418

closed

RGW doesn't check time skew in auth v4 http header request

Added by 芽亮 豆 over 6 years ago. Updated about 6 years ago.

Status:
Resolved
Priority:
Normal
Assignee:
-
Target version:
Ceph - v13.0.0
% Done:

0%

Source:
Tags:
RGW
Backport:
luminous
Regression:
No
Severity:
3 - minor
Reviewed:
Affected Versions:
ceph-qa-suite:
Pull request ID:
Crash signature (v1):
Crash signature (v2):

Description

In auth v4 http header request, RGW doesn't check time skew, while AWS does.

Related issues 1 (0 open — 1 closed)

Copied to rgw - Backport #22766: luminous: RGW doesn't check time skew in auth v4 http header requestResolvedNathan CutlerActions
Actions
Copy link
 #1

Updated by Radoslaw Zarzynski over 6 years ago

  • Status changed from New to In Progress
Actions
Copy link
 #2

Updated by Casey Bodley over 6 years ago

  • Status changed from In Progress to 7
Actions
Copy link
 #3

Updated by Yuri Weinstein over 6 years ago

Radoslaw Zarzynski wrote:

https://github.com/ceph/ceph/pull/19476 by Bingyin Zhang.

merged

Actions
Copy link
 #4

Updated by Yehuda Sadeh over 6 years ago

  • Status changed from 7 to Pending Backport
  • Backport set to luminous
Actions
Copy link
 #5

Updated by Casey Bodley over 6 years ago

additional cleanup in https://github.com/ceph/ceph/pull/20013 can be backported as well

Actions
Copy link
 #6

Updated by Nathan Cutler about 6 years ago

  • Copied to Backport #22766: luminous: RGW doesn't check time skew in auth v4 http header request added
Actions
Copy link
 #7

Updated by Nathan Cutler about 6 years ago

  • Status changed from Pending Backport to Resolved
Actions
Copy link

Also available in: Atom PDF