freeipa

#7433 CRL url on replicas gets incorrectly redirected
Closed: fixed Opened by fbarreto.

Closed: fixed
Reopen Issue

Ticket was cloned from Red Hat Bugzilla (product Red Hat Enterprise Linux 7): Bug 1547995

Description of problem:
On a IDM replica the CRL url gets redirected to an incorrect URL.
This does not happen when trying the first IDM server's CRL URL.
How reproducible:
Every time, against a IDM replica
Steps to Reproduce:
1. deploy idm
2. deploy a replica
3. try to fetch http://replica.example.com/ipa/crl/MasterCRL.bin from the
replica
Actual results:
Request gets redirected to
https://replica.example.com/ca/ee/ca/getCRL?op=getCRL&crlIssuingPoint=MasterCRL
Expected results:
The request should not be redirected
Additional info:
This only happens against replicas, not the first IDM server.

Metadata Update from @fbarreto:
- Custom field rhbz adjusted to https://bugzilla.redhat.com/show_bug.cgi?id=1547995

Metadata Update from @fbarreto:
- Issue priority set to: important

Metadata Update from @rcritten:
- Issue assigned to rcritten

master:

  • bfd11701188bb1d41bf0d15942b8bd2776cfa159 Redirect CRL requests to the http port, not the https port

@rcritten Fix needs manual backport to 4.5 and 4.6

ipa-4-6 backport PR: https://github.com/freeipa/freeipa/pull/1874
ipa-4-5 backport PR: https://github.com/freeipa/freeipa/pull/1875

ipa-4-6:

  • cec801d34262a879961378cacf46a81f66e48350 Redirect CRL requests to the http port, not the https port

ipa-4-5:

  • 895ae3ccf68d8cefce18802c821015d9e425fb01 Redirect CRL requests to the http port, not the https port

Metadata Update from @cheimes:
- Issue close_status updated to: fixed
- Issue status updated to: Closed (was: Open)
Metadata
None
None
None
Low
Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.
Red Hat Logo

Fedora is sponsored by Red Hat. Learn more about the relationship between Red Hat and Fedora »

© Red Hat, Inc. and others.