freeipa

#8373 certmonger: Submit cert approval request via POST
Closed: fixed by rcritten. Opened by dmoluguw.

Closed: fixed
Reopen Issue

Issue

certmonger submits the cert approval request via GET, which is not secure.

it uses GET for profileReview (which is fine since it is just retrieving) and profileProcess (which is unsecure)

This issue was discovered when an upstream Dogtag PKI patch to force POST operation was submitted

Release/Distribution

(From @freeipa/freeipa-master-nightly)
4.9.0.dev202006171944+git-0.fc31

Additional info:

Failed CI log: https://github.com/dogtagpki/pki/runs/782596280?check_suite_focus=true#step:11:183

The offending code is in src/submit-d.c

I've analysed it, and will provide a patch in the next day or so.

Pull request: https://pagure.io/certmonger/pull-request/157

certmonger master: 1fa94e536b1f0b3dfed3732680d8a930ae86ebfc

Metadata Update from @rcritten:
- Issue close_status updated to: fixed
- Issue status updated to: Closed (was: Open)
Metadata
None
None
None
None
None
Related Pull Requests
Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.
Red Hat Logo

Fedora is sponsored by Red Hat. Learn more about the relationship between Red Hat and Fedora »

© Red Hat, Inc. and others.