Closed openshift-cherrypick-robot closed 4 months ago
@openshift-cherrypick-robot: Jira Issue OCPBUGS-26539 has been cloned as Jira Issue OCPBUGS-32693. Will retitle bug to link to clone. /retitle [release-4.15] OCPBUGS-32693: Reject routes with MD5 certs
@openshift-cherrypick-robot: This pull request references Jira Issue OCPBUGS-32693, which is invalid:
Comment /jira refresh
to re-evaluate validity if changes to the Jira bug are made, or edit the title of this pull request to link to a different bug.
The bug has been updated to refer to the pull request using the external bug tracker.
Quoting Grant:
it's low risk as the HaProxy currently fails to start when it tries to process a
spec.tls.certificate
with an MD5 cert (same type of issues as SHA1 in 4.16).
Moreover, the change is a small change, well isolated in the extended validation logic, and conditioned on certificates that use the MD5 signature algorithm. All in all, I agree that this backport is low risk.
/label backport-risk-assessed
/approve /lgtm
[APPROVALNOTIFIER] This PR is APPROVED
This pull-request has been approved by: Miciah
The full list of commands accepted by this bot can be found here.
The pull request process is described here
/refresh jira
/jira refresh
@gcs278: This pull request references Jira Issue OCPBUGS-32693, which is valid. The bug has been moved to the POST state.
Requesting review from QA contact: /cc @lihongan
OVNKubernetesResourceRetryFailure
. Doesn't appear related.
/test e2e-aws-serial
@openshift-cherrypick-robot: all tests passed!
Full PR test history. Your PR dashboard.
/label cherry-pick-approved thanks
@openshift-cherrypick-robot: Jira Issue OCPBUGS-32693: All pull requests linked via external trackers have merged:
Jira Issue OCPBUGS-32693 has been moved to the MODIFIED state.
[ART PR BUILD NOTIFIER]
This PR has been included in build ose-haproxy-router-base-container-v4.15.0-202405060208.p0.g1cac6b7.assembly.stream.el8 for distgit ose-haproxy-router-base. All builds following this will include this PR.
Fix included in accepted release 4.15.0-0.nightly-2024-05-06-031252
This is an automated cherry-pick of #553
/assign gcs278