Dmitriy Rabotyagov ef750725f5 Disable Peer verification for the proxy ...

Proxy module does attempt to verify if service does contain the
host name of the peer in destination CNs/SAN [1].

At the moment we disable the check, as leaving it in place might
have an unexpected impact on deployments with user-provided
certificates which needs to be re-issued to add management_address
to CNs.

[1] https://httpd.apache.org/docs/2.4/mod/mod_ssl.html#sslproxycheckpeername

Closes-Bug: #2115487
Change-Id: Ida475087736984a2f9237d3c7b1a509166d3a623
Signed-off-by: Dmitriy Rabotyagov <dmitriy.rabotyagov@cleura.com>

2025-09-04 11:08:57 +00:00

..

notes

Disable Peer verification for the proxy

2025-09-04 11:08:57 +00:00

source

Re-add Zuul testing to the project

2024-03-16 09:38:03 +00:00