Project

General

Profile

Bug #24453

Feature #47765: mgr/dashboard: security improvements

mgr/dashboard: Manager should complain about wrong dashboard certificate

Added by Momcilo Medic almost 6 years ago. Updated almost 3 years ago.

Status:
Resolved
Priority:
Normal
Assignee:
Category:
General
Target version:
% Done:

0%

Source:
Tags:
Backport:
nautilus, mimic
Regression:
No
Severity:
3 - minor
Reviewed:
Affected Versions:
ceph-qa-suite:
Pull request ID:
Crash signature (v1):
Crash signature (v2):

Description

Configuring the dashboard and selecting certificates didn't work as intended.
Dashboard wouldn't load (it didn't even listen on any ports).
When reverted to using self-signed certificates, dashboard suddenly works.

Expected behaviour: if, for whatever reason, certificates are wrong (format, type, ...) mgr should throw an error in log.
Actual behaviour: manager was silently failing to display dashboard

Logs from mgr are attached.

mgr.log View (2.95 KB) Momcilo Medic, 06/08/2018 11:56 AM

mgr.dump (2.02 KB) Momcilo Medic, 06/08/2018 11:56 AM


Related issues

Copied to Dashboard - Backport #39346: nautilus: mgr/dashboard: Manager should complain about wrong dashboard certificate Resolved
Copied to Dashboard - Backport #39347: mimic: mgr/dashboard: Manager should complain about wrong dashboard certificate Resolved

History

#1 Updated by Patrick Seidensal almost 6 years ago

  • Category set to 132

#2 Updated by Lenz Grimmer over 5 years ago

  • Tracker changed from Feature to Bug
  • Subject changed from Manager should complain about wrong dashboard certificate to mgr/dashboard: Manager should complain about wrong dashboard certificate
  • Regression set to No
  • Severity set to 3 - minor

#3 Updated by Lenz Grimmer about 5 years ago

  • Assignee set to Ricardo Dias

@Ricardo: can you please take a look and comment?

#4 Updated by Volker Theile about 5 years ago

  • Pull request ID set to 27036

#5 Updated by Lenz Grimmer about 5 years ago

  • Status changed from New to In Progress

See https://github.com/ceph/ceph/pull/27036 for follow-up discussions on the implementation

#6 Updated by Lenz Grimmer about 5 years ago

  • Target version set to v14.2.0

#7 Updated by Lenz Grimmer about 5 years ago

  • Backport set to mimic

#8 Updated by Ricardo Dias about 5 years ago

  • Assignee changed from Ricardo Dias to Volker Theile

#9 Updated by Lenz Grimmer about 5 years ago

  • Tags set to usability, security, ssl

#10 Updated by Lenz Grimmer about 5 years ago

  • Target version changed from v14.2.0 to v15.0.0
  • Backport changed from mimic to nautilus, mimic

#11 Updated by Lenz Grimmer almost 5 years ago

  • Status changed from In Progress to Fix Under Review

#12 Updated by Lenz Grimmer almost 5 years ago

  • Tags set to usability, security, configuration
  • Status changed from Fix Under Review to Pending Backport

#13 Updated by Lenz Grimmer almost 5 years ago

  • Tags deleted (usability, security, ssl)

#14 Updated by Nathan Cutler almost 5 years ago

  • Copied to Backport #39346: nautilus: mgr/dashboard: Manager should complain about wrong dashboard certificate added

#15 Updated by Nathan Cutler almost 5 years ago

  • Copied to Backport #39347: mimic: mgr/dashboard: Manager should complain about wrong dashboard certificate added

#16 Updated by Nathan Cutler almost 5 years ago

  • Status changed from Pending Backport to Resolved

#17 Updated by Ernesto Puerta over 3 years ago

  • Parent task set to #47765

#18 Updated by Ernesto Puerta almost 3 years ago

  • Project changed from mgr to Dashboard
  • Category changed from 132 to General

Also available in: Atom PDF