[Group.of.nepali.translators] [Bug 1771988] Re: certificate validation with IP address based SAN's fails
This bug was fixed in the package python-urllib3 - 1.13.1-2ubuntu0.16.04.2~cloud0 --- python-urllib3 (1.13.1-2ubuntu0.16.04.2~cloud0) trusty-mitaka; urgency=medium . * New update for the Ubuntu Cloud Archive. . python-urllib3 (1.13.1-2ubuntu0.16.04.2) xenial; urgency=medium . * d/p/07_support_ip_sans.patch: Cherry pick fix to support use of IP based SAN's in TLS certificates (LP: #1771988). ** Changed in: cloud-archive/mitaka Status: Fix Committed => Fix Released -- You received this bug notification because you are a member of नेपाली भाषा समायोजकहरुको समूह, which is subscribed to Xenial. Matching subscriptions: Ubuntu 16.04 Bugs https://bugs.launchpad.net/bugs/1771988 Title: certificate validation with IP address based SAN's fails Status in Ubuntu Cloud Archive: Fix Released Status in Ubuntu Cloud Archive mitaka series: Fix Released Status in python-urllib3 package in Ubuntu: Fix Released Status in python-urllib3 source package in Xenial: Fix Released Bug description: [Impact] Users of urllib3 are unable to securely access websites who's certificates use IP based subject alternative names; this includes openstack client tooling which uses urllib3 via requests. [Test Case] Deploy and configure a server with TLS and an IP based SAN cert with a locally trusted CA. import urllib3 http = urllib3.PoolManager() r = http.request('GET', 'https://192.168.1.2') will fail [Regression Potential] Cherry picked fix comes from a later urllib3 release which has tested fine for IP SAN usage in later OpenStack release deployments. [Original Bug Report] urllib3 fails to validate certificates with IP address based SAN's. Fixed upstream: https://github.com/urllib3/urllib3/commit/c74bd70c3a97e30f0560bee9b7fa1bfc767ebf0b To manage notifications about this bug go to: https://bugs.launchpad.net/cloud-archive/+bug/1771988/+subscriptions ___ Mailing list: https://launchpad.net/~group.of.nepali.translators Post to : group.of.nepali.translators@lists.launchpad.net Unsubscribe : https://launchpad.net/~group.of.nepali.translators More help : https://help.launchpad.net/ListHelp
[Group.of.nepali.translators] [Bug 1771988] Re: certificate validation with IP address based SAN's fails
This bug was fixed in the package python-urllib3 - 1.13.1-2ubuntu0.16.04.2 --- python-urllib3 (1.13.1-2ubuntu0.16.04.2) xenial; urgency=medium * d/p/07_support_ip_sans.patch: Cherry pick fix to support use of IP based SAN's in TLS certificates (LP: #1771988). -- James Page Mon, 20 Aug 2018 15:54:33 +0100 ** Changed in: python-urllib3 (Ubuntu Xenial) Status: Fix Committed => Fix Released -- You received this bug notification because you are a member of नेपाली भाषा समायोजकहरुको समूह, which is subscribed to Xenial. Matching subscriptions: Ubuntu 16.04 Bugs https://bugs.launchpad.net/bugs/1771988 Title: certificate validation with IP address based SAN's fails Status in Ubuntu Cloud Archive: Fix Released Status in Ubuntu Cloud Archive mitaka series: In Progress Status in python-urllib3 package in Ubuntu: Fix Released Status in python-urllib3 source package in Xenial: Fix Released Bug description: [Impact] Users of urllib3 are unable to securely access websites who's certificates use IP based subject alternative names; this includes openstack client tooling which uses urllib3 via requests. [Test Case] Deploy and configure a server with TLS and an IP based SAN cert with a locally trusted CA. import urllib3 http = urllib3.PoolManager() r = http.request('GET', 'https://192.168.1.2') will fail [Regression Potential] Cherry picked fix comes from a later urllib3 release which has tested fine for IP SAN usage in later OpenStack release deployments. [Original Bug Report] urllib3 fails to validate certificates with IP address based SAN's. Fixed upstream: https://github.com/urllib3/urllib3/commit/c74bd70c3a97e30f0560bee9b7fa1bfc767ebf0b To manage notifications about this bug go to: https://bugs.launchpad.net/cloud-archive/+bug/1771988/+subscriptions ___ Mailing list: https://launchpad.net/~group.of.nepali.translators Post to : group.of.nepali.translators@lists.launchpad.net Unsubscribe : https://launchpad.net/~group.of.nepali.translators More help : https://help.launchpad.net/ListHelp
[Group.of.nepali.translators] [Bug 1771988] Re: certificate validation with IP address based SAN's fails
Marking Newton task as Invalid as urllib3 does not form part of that UCA pocket (uses version from Xenial). ** Changed in: cloud-archive/mitaka Status: Triaged => In Progress ** Changed in: cloud-archive/mitaka Assignee: (unassigned) => James Page (james-page) ** Description changed: [Impact] Users of urllib3 are unable to securely access websites who's certificates use IP based subject alternative names; this includes openstack client tooling which uses urllib3 via requests. [Test Case] Deploy and configure a server with TLS and an IP based SAN cert with a locally trusted CA. import urllib3 - + http = urllib3.PoolManager() r = http.request('GET', 'https://192.168.1.2') will fail - [Regression Potential] Cherry picked fix comes from a later urllib3 release which has tested fine for IP SAN usage in later OpenStack release deployments. [Original Bug Report] urllib3 fails to validate certificates with IP address based SAN's. Fixed upstream: https://github.com/urllib3/urllib3/commit/c74bd70c3a97e30f0560bee9b7fa1bfc767ebf0b ** Changed in: cloud-archive/newton Status: Triaged => Invalid ** No longer affects: cloud-archive/newton -- You received this bug notification because you are a member of नेपाली भाषा समायोजकहरुको समूह, which is subscribed to Xenial. Matching subscriptions: Ubuntu 16.04 Bugs https://bugs.launchpad.net/bugs/1771988 Title: certificate validation with IP address based SAN's fails Status in Ubuntu Cloud Archive: Fix Released Status in Ubuntu Cloud Archive mitaka series: In Progress Status in python-urllib3 package in Ubuntu: Fix Released Status in python-urllib3 source package in Xenial: In Progress Bug description: [Impact] Users of urllib3 are unable to securely access websites who's certificates use IP based subject alternative names; this includes openstack client tooling which uses urllib3 via requests. [Test Case] Deploy and configure a server with TLS and an IP based SAN cert with a locally trusted CA. import urllib3 http = urllib3.PoolManager() r = http.request('GET', 'https://192.168.1.2') will fail [Regression Potential] Cherry picked fix comes from a later urllib3 release which has tested fine for IP SAN usage in later OpenStack release deployments. [Original Bug Report] urllib3 fails to validate certificates with IP address based SAN's. Fixed upstream: https://github.com/urllib3/urllib3/commit/c74bd70c3a97e30f0560bee9b7fa1bfc767ebf0b To manage notifications about this bug go to: https://bugs.launchpad.net/cloud-archive/+bug/1771988/+subscriptions ___ Mailing list: https://launchpad.net/~group.of.nepali.translators Post to : group.of.nepali.translators@lists.launchpad.net Unsubscribe : https://launchpad.net/~group.of.nepali.translators More help : https://help.launchpad.net/ListHelp
[Group.of.nepali.translators] [Bug 1771988] Re: certificate validation with IP address based SAN's fails
** Changed in: python-urllib3 (Ubuntu Xenial) Status: Fix Released => In Progress -- You received this bug notification because you are a member of नेपाली भाषा समायोजकहरुको समूह, which is subscribed to Xenial. Matching subscriptions: Ubuntu 16.04 Bugs https://bugs.launchpad.net/bugs/1771988 Title: certificate validation with IP address based SAN's fails Status in Ubuntu Cloud Archive: Fix Released Status in Ubuntu Cloud Archive mitaka series: Triaged Status in Ubuntu Cloud Archive newton series: Triaged Status in python-urllib3 package in Ubuntu: Fix Released Status in python-urllib3 source package in Xenial: In Progress Bug description: [Impact] Users of urllib3 are unable to securely access websites who's certificates use IP based subject alternative names; this includes openstack client tooling which uses urllib3 via requests. [Test Case] Deploy and configure a server with TLS and an IP based SAN cert with a locally trusted CA. import urllib3 http = urllib3.PoolManager() r = http.request('GET', 'https://192.168.1.2') will fail [Regression Potential] Cherry picked fix comes from a later urllib3 release which has tested fine for IP SAN usage in later OpenStack release deployments. [Original Bug Report] urllib3 fails to validate certificates with IP address based SAN's. Fixed upstream: https://github.com/urllib3/urllib3/commit/c74bd70c3a97e30f0560bee9b7fa1bfc767ebf0b To manage notifications about this bug go to: https://bugs.launchpad.net/cloud-archive/+bug/1771988/+subscriptions ___ Mailing list: https://launchpad.net/~group.of.nepali.translators Post to : group.of.nepali.translators@lists.launchpad.net Unsubscribe : https://launchpad.net/~group.of.nepali.translators More help : https://help.launchpad.net/ListHelp
[Group.of.nepali.translators] [Bug 1771988] Re: certificate validation with IP address based SAN's fails
** Also affects: python-urllib3 (Ubuntu Xenial) Importance: Undecided Status: New ** Changed in: python-urllib3 (Ubuntu) Status: New => Fix Released ** Changed in: python-urllib3 (Ubuntu) Importance: Undecided => High ** Changed in: python-urllib3 (Ubuntu Xenial) Importance: Undecided => High ** Changed in: python-urllib3 (Ubuntu Xenial) Status: New => Triaged ** Also affects: cloud-archive/mitaka Importance: Undecided Status: New ** Also affects: cloud-archive/newton Importance: Undecided Status: New ** Changed in: cloud-archive Status: New => Fix Released ** Changed in: cloud-archive/mitaka Status: New => Triaged ** Changed in: cloud-archive/newton Status: New => Triaged ** Changed in: cloud-archive/newton Importance: Undecided => High ** Changed in: cloud-archive/mitaka Importance: Undecided => High -- You received this bug notification because you are a member of नेपाली भाषा समायोजकहरुको समूह, which is subscribed to Xenial. Matching subscriptions: Ubuntu 16.04 Bugs https://bugs.launchpad.net/bugs/1771988 Title: certificate validation with IP address based SAN's fails Status in Ubuntu Cloud Archive: Fix Released Status in Ubuntu Cloud Archive mitaka series: Triaged Status in Ubuntu Cloud Archive newton series: Triaged Status in python-urllib3 package in Ubuntu: Fix Released Status in python-urllib3 source package in Xenial: Triaged Bug description: urllib3 fails to validate certificates with IP address based SAN's. Fixed upstream: https://github.com/urllib3/urllib3/commit/c74bd70c3a97e30f0560bee9b7fa1bfc767ebf0b To manage notifications about this bug go to: https://bugs.launchpad.net/cloud-archive/+bug/1771988/+subscriptions ___ Mailing list: https://launchpad.net/~group.of.nepali.translators Post to : group.of.nepali.translators@lists.launchpad.net Unsubscribe : https://launchpad.net/~group.of.nepali.translators More help : https://help.launchpad.net/ListHelp