ivanoe : [ERROR] Registration failed [Failed verifying the server certificate.

[samkos]

Hi

since a week or so, vishnu encounters problems of connection for the TMS daemon running on the front node of ivanoe.

Here are the traces I got

[INFO] Expecting ciphered database

Certifcate trust store (CA): /logiciels/vishnu/.vishnu/3.1/ca-3.1.pem
[INFO] Registration address: 130.98.90.24:5561 with TLS

Certifcate trust store (CA):
ciphered database connections... [ERROR] Registration failed [Failed verifying the server certificate.
error:00000000:lib(0):func(0):reason(0)]
[INFO] ZMQ socket bound (ipc:///tmp/vishnu-tmssed.sock)
[INFO] TLS socket bound (0.0.0.0:5557)

Would you have any hints on what goes wrong?

SK

[rchakode]

It seems that the certificate loaded in the SSL trust store on TMS (set through sslCa=logiciels/vishnu/.vishnu/3.1/ca-3.1.pem) doesn't match the certificate loaded on the server (set through the key serverSslCertificate).

Could you check that and tell us ?

[samkos]

Yes I've just checked and they match. it cause no problem at all when BGQ's TMS tries to connect with the exact same certificate

[rchakode]

What about permissions on the file /logiciels/vishnu/.vishnu/3.1/ca-3.1.pem ? Does the user running TMS can access it?

[samkos]

Permission is OK, the user can access and read the file without any problem

[rchakode]

weird problem, since all work fine on BGQ. I was trying to take a look at the problem on the machine, but I have a message indicating that the machine has been put offline for maintenance duties.

[samkos]

OK thanks, keep me posted!

[bdepardo]

Fixed by Kevin