migtools / mig-ui

Openshift Migration UI
Apache License 2.0
10 stars 31 forks source link

Migration UI Login redirect not working when using custom CA in the default ingress router #755

Open benaka47 opened 4 years ago

benaka47 commented 4 years ago

After adding a custom self-signed defaultcertificate following in the default ingress router

The web UI fails to login with the follwoing error:

{"error":"invalid_request","error_description":"The request is missing a required parameter, includes an invalid parameter value, includes a parameter more than once, or is otherwise malformed."}

The oauth server pods shows this message in the log:

http: TLS handshake error from :43440 : remote error: tls: unknown certificate

It seems that the web UI is not using the bundle from /etc/ssl/certs to validate the certificate against the ingress router

eriknelson commented 4 years ago

Thanks for the report, could you email me ernelson \<at> redhat, so I can follow up with you and make sure we get this reproduced and QE'd.

xinredhat commented 3 years ago

@benaka47 would yo please share the steps about adding a custom self-signed defaultcertificate? I couldn't reproduce this issue.