bmcweb
bmcweb copied to clipboard
Replacing/deleting CA certificate doesn't close https connections made based on that CA certificate
Issue is about https connections made based on CA certificate are not closed when CA certificate is replaced or deleted. Step to reproduce:
- Install CA certificate (mTLS).
- Create (and keep alive) https connection based on installed CA certificate.
- Delete CA certificate installed in first step.
- Check if connection created in the second step is valid/active.
Current result: Connection is still valid/active
Expected result: Connection was closed.
Unclear if this was the intended behavior or not, so I've marked as both a bug and an enhancement. So far as I'm aware, this would be the only place where we shutdown a session because of an authentication change, but we could certainly make that a new behavior.
No progress in 3 years. Clearly this isn't required. Closing.