Fix the disable_ssl_certificate_validation option
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
python-httplib2 (Ubuntu) |
New
|
Undecided
|
Unassigned |
Bug Description
[Environment]
Bionic
python3-httplib2 | 0.9.2+dfsg-
[Description]
maas cli fails to work with apis over https with self-signed certificates due to the lack
of disable_
[Distribution/
cat /etc/lsb-release; dpkg -l | grep maas
DISTRIB_ID=Ubuntu
DISTRIB_
DISTRIB_
DISTRIB_
ii maas 2.8.2-8577-
ii maas-cli 2.8.2-8577-
ii maas-common 2.8.2-8577-
ii maas-dhcp 2.8.2-8577-
ii maas-proxy 2.8.2-8577-
ii maas-rack-
ii maas-region-api 2.8.2-8577-
ii maas-region-
ii python3-django-maas 2.8.2-8577-
ii python3-maas-client 2.8.2-8577-
ii python3-
[Steps to Reproduce]
- prepare a maas server(installed by packages for me and the customer). it doesn't have to be HA to reproduce
- prepare a set of certificate, key and ca-bundle
- place a new conf[2] in /etc/nginx/
- add the ca certificates to the host
sudo mkdir /usr/share/
sudo cp -v ca-bundle.crt /usr/share/
dpkg-reconfigure ca-certificates
- login with a new profile over https url
- when not added the ca-bundle to the trusted ca cert store, it fails to login and '--insecure' flag also doesn't work[3]
[Known Workarounds]
None