mod_nss

#21 detect and fail for colons in credentials with FakeBasicAuth
Closed: Fixed Opened by rcritten.

Closed: Fixed
Reopen Issue

A colon is now allowed in a username/password combination for basic auth per RFC 2617. If authenticating with a cert that has a colon in the DN things end up breaking. See https://bugzilla.redhat.com/show_bug.cgi?id=1027442 for many more gory details.

The plan for this is to fix it by disallowing colon in a DN for now, like mod_ssl in RHEL 6, see patch in https://bugzilla.redhat.com/show_bug.cgi?id=1027442#c26

We may eventually make this more flexible.

master: 184804c82daf7fe04dfb0b0ecdc3e06be0c103c1

Metadata Update from @rcritten:
- Issue set to the milestone: mod_nss-1.0.13
Metadata
None
None
None
None
Normal
defect
core
Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.
Red Hat Logo

Fedora is sponsored by Red Hat. Learn more about the relationship between Red Hat and Fedora »

© Red Hat, Inc. and others.