Fixes #32513 - Check certificate serial only when in standalone mode

theforeman · May 5, 2021 · 3bc55f2 · 3bc55f2
1 parent 8bef272
commit 3bc55f2
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/lib/smart_proxy_dynflow_core/helpers.rb b/lib/smart_proxy_dynflow_core/helpers.rb
@@ -26,7 +26,7 @@ def authorize_with_ssl_client
         if request.env['SSL_CLIENT_CERT'].to_s.empty?
           Log.instance.error "No client SSL certificate supplied"
           halt 403, MultiJson.dump(:error => "No client SSL certificate supplied")
-        else
+        elsif Settings.instance.standalone
           client_cert = OpenSSL::X509::Certificate.new(request.env['SSL_CLIENT_CERT'])
           unless SmartProxyDynflowCore::Core.instance.accepted_cert_serial == client_cert.serial
             Log.instance.error "SSL certificate with unexpected serial supplied"