[chef] Re: Re: Re: Re: Re: Re: New errors after upgrading Chef clients to 11.6


Chronological Thread 
  • From: Daniel DeLeo < >
  • To:
  • Subject: [chef] Re: Re: Re: Re: Re: Re: New errors after upgrading Chef clients to 11.6
  • Date: Fri, 6 Sep 2013 08:32:30 -0700

On Friday, September 6, 2013 at 6:51 AM, Jeff Blaine wrote:
This seems like a bug in 11.6, no? Is there a ticket open? I couldn't
find one.
Not a chef-client bug. Arguably a bug in the server. People used to never have this problem because merb generates URLs for a response based on the Host (and related) headers in the request. This is tricky to get correct from a security perspective (cf., http://www.skeletonscribe.net/2013/05/practical-http-host-header-attacks.html ), but obviously the way this works currently can be confusing when things go wrong.

I've talked over a few possible resolutions with the server guys so I think we'll improve this in a future release.


-- 
Daniel DeLeo





Archive powered by MHonArc 2.6.16.

§