always compare CNs as downcase

Sometimes people end up with certificates that have uppercase letters in the CN, but pass lowercase in the auth map.
theforeman · Dec 17, 2024 · 56e044d · 56e044d
1 parent 26254db
commit 56e044d
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/manifests/apache.pp b/manifests/apache.pp
@@ -53,7 +53,7 @@
   ]
 
   $api_additional_request_headers = $pulpcore::api_client_auth_cn_map.map |String $cn, String $pulp_user| {
-    "set ${remote_user_environ_header} \"${pulp_user}\" \"expr=%{SSL_CLIENT_S_DN_CN} == '${cn}'\""
+    "set ${remote_user_environ_header} \"${pulp_user}\" \"expr=%{tolower:SSL_CLIENT_S_DN_CN} == '${cn.downcase}'\""
   }
 
   $api_directory = {