----- Original Message ----- > From: "Jeremy Cline" <jcl...@redhat.com> > To: pulp-list@redhat.com > Sent: Wednesday, February 3, 2016 8:55:30 AM > Subject: Re: [Pulp-list] Pulp 2.6 vs 2.8 event notifier question > > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA256 > > On 02/03/2016 08:51 AM, Eric Helms wrote: > > Howdy, > > > > In the case where verification is occurring, how does a user who > > does not have access to the box Pulp is on, give Pulp the proper > > certificate so that Pulp can verify the URL being hit? > > Just ensure the certificate of the web server being POSTed to is signed > by a trusted authority. If the user doesn't have access to the box, that > means something that's in the trust store already.
Not to be argumentative, but that seems like a cop out. I would think as a user I should be able to provide you with the CA certificate that should be used for verification for a given event notification. I realize this is a deprecated feature and my intent is not to incur more work. However, I do find value in having the right solution in place. Eric > > - -- > Jeremy Cline > -----BEGIN PGP SIGNATURE----- > Version: GnuPG v2 > > iQIcBAEBCAAGBQJWsga9AAoJEJIjMI+pskbbArIQAJ63ljSyMqxp/165JgLrNK41 > WOigoCaPGMoDS/j356y2S+vAa5S5TpbJmkyE852TKoy5SdLycv01CQIWYvDs/PNO > V0h1Uv+QFwbdOulM1DuT1yW+VR3bXkE9CaDwXK95tydwmtGWXF9u+VChBrkSMzGc > 4rEL2uu0cyWvaFkEsGQMVbHWfv5GR1aHabJrxrG0JqLxYwGi3IFve3c3OqKkxyIX > uzksT79Bmbv1RX7sD7IBHbBkXFDIZMw/8xd/N7aFVVKr6a8yZnUYKfG8HH16wMQf > WnMslcPbPX6uG5709/8JPPDU6vuYoFsVvz8s6+ZxEHCmLADibKYCwJITe8zr1xNm > 5UG9YMTX3MR714a/Dq3/ORXj2BeOEBDVCsr/zXB5Vu3SLnNvR0bDS0gFsNAj638k > qkqYW0mmBKK6gunMVolMRod/+gkFjwTZ8aOKqCNgQiQjSQXJ9upGdfz8c/Xb0Imo > sNn72t8Pyi2wWyf6CkAmaKLYEUUhxAngGqy+h8Al2KERkfh+XAOQncGaNWAs5hy9 > ZDf4U+n2G9DI2x4jKzozDki9MdvqfQHNmTQEzZDJ9HF6f0OmT1AKcsHUU9XJIpfw > Y3uFSuEys/MVMujgBOcH+axyPA3lCNyfPmSPrXsL6KyzsQF7t9xt0MC6sitirRd5 > b8dXspfN/fBtv0xMthf5 > =y+uD > -----END PGP SIGNATURE----- > > _______________________________________________ > Pulp-list mailing list > Pulp-list@redhat.com > https://www.redhat.com/mailman/listinfo/pulp-list > _______________________________________________ Pulp-list mailing list Pulp-list@redhat.com https://www.redhat.com/mailman/listinfo/pulp-list
