From 56e044d85325d38a33e889cf034f16541e71df1b Mon Sep 17 00:00:00 2001
From: Evgeni Golov <evgeni@golov.de>
Date: Tue, 17 Dec 2024 11:53:54 +0100
Subject: [PATCH] always compare CNs as downcase

Sometimes people end up with certificates that have uppercase letters in
the CN, but pass lowercase in the auth map.
---
 manifests/apache.pp | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/manifests/apache.pp b/manifests/apache.pp
index b3fec56..de6c501 100644
--- a/manifests/apache.pp
+++ b/manifests/apache.pp
@@ -53,7 +53,7 @@
   ]
 
   $api_additional_request_headers = $pulpcore::api_client_auth_cn_map.map |String $cn, String $pulp_user| {
-    "set ${remote_user_environ_header} \"${pulp_user}\" \"expr=%{SSL_CLIENT_S_DN_CN} == '${cn}'\""
+    "set ${remote_user_environ_header} \"${pulp_user}\" \"expr=%{tolower:SSL_CLIENT_S_DN_CN} == '${cn.downcase}'\""
   }
 
   $api_directory = {