NICMx / FORT-validator

RPKI cache validator
MIT License
47 stars 23 forks source link

fort 1.5.1 double crash ... Attempted to pop empty X509 stack #60

Open AlexIT-FT opened 2 years ago

AlexIT-FT commented 2 years ago

OS Debian 10.10 Linux rpki 4.19.0-17-amd64 #1 SMP Debian 4.19.194-3 (2021-07-18) x86_64 GNU/Linux fort 1.5.1

two identical instances of FORT 1.5.1 in two datacenters crashed at the same time (or so), with the very same error

ERR [Operation]: /etc/tals/ripe-ncc.tal: Attempted to pop empty X509 stack fort.service: Main process exited, code=exited, status=255/EXCEPTION fort.service: Failed with result 'exit-code'.

config.json fort1.err fort2.err attached

I'm available for any test.

lukastribus commented 2 years ago

See #58 and #59

liviomorina commented 2 years ago

Alex, I suggest running 2 different validators to avoid this kind of problem. (it is a general suggestion for all the users that will land in this thread, not focused on your specific case)

AlexIT-FT commented 2 years ago

Yes, I'm doing so  ... FORT and ROUTINATOR .

But, I wanted to give my contribution by reporting this anomaly.

--

Alessandro Montano I.T. Manager

Phone +39 091 733 11 11

FIBER TELECOM S.p.A.

· Via Caldera, 21 - 20153 Milano Italy · www.fibertelecom.com https://www.fibertelecom.it/index.php · Tel. +39 02 8994 1111 https://www.linkedin.com/company/fibertelecom https://twitter.com/fibertelecomspa https://www.facebook.com/fibertelecomofficial https://www.youtube.com/channel/UCacxeJwRrZycr6atxCZqopw

PRIVACY https://www.fibertelecom.it/it/privacy-policy.php- GDPR - Regulation UE 2016/679 Il 12/10/2021 13:22, liviomorina ha scritto:

Alex, I suggest running 2 different validation deamons to avoid this kind of problem

— You are receiving this because you authored the thread. Reply to this email directly, view it on GitHub https://github.com/NICMx/FORT-validator/issues/60#issuecomment-940916179, or unsubscribe https://github.com/notifications/unsubscribe-auth/AQAL3R7IFS6VTZAPTLYNAYTUGQK55ANCNFSM5FZ5DTVQ. Triage notifications on the go with GitHub Mobile for iOS https://apps.apple.com/app/apple-store/id1477376905?ct=notification-email&mt=8&pt=524675 or Android https://play.google.com/store/apps/details?id=com.github.android&referrer=utm_campaign%3Dnotification-email%26utm_medium%3Demail%26utm_source%3Dgithub.

-- Questa e-mail è stata controllata per individuare virus con Avast antivirus. https://www.avast.com/antivirus

liviomorina commented 2 years ago

I did an edit to the original msg, unfortunately, the version mailed to you was the previous one

ydahhrk commented 2 years ago

1.5.2 has been released.

If you haven't installed the issue58-simple patch, you're strongly encouraged to upgrade to 1.5.2.