nymtech / nym

Nym provides strong network-level privacy against sophisticated end-to-end attackers, and anonymous transactions using blinded, re-randomizable, decentralized credentials.
https://nymtech.net
1.29k stars 233 forks source link

[Issue] Error when starting nym-mixnode without root perms #3579

Closed craftdome closed 9 months ago

craftdome commented 1 year ago

Describe the issue Error when starting nym-mixnode without root perms.

Expected behaviour Starting in normal mode.

Stack Traces Command: RUST_BACKTRACE=1 ./nym-mixnode run --id Output:

nym_mixnode::node > Starting nym mixnode
 2023-06-20T11:03:27.229Z ERROR nym_mixnode::node > failed to grab initial network mixnodes - nym api request failed - There was an issue with the REST request - error sending request for url (https://validator.nymtech.net/api//v1/mixnodes): error trying to connect: error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed:ssl/statem/statem_clnt.c:1919: (unable to get local issuer certificate)
 Please try to startup again in few minutes

Steps to Reproduce ./nym-mixnode run --id mixnode

Screenshots wget https://validator.nymtech.net/api//v1/mixnodes

изображение

wget https://gnu.org/

изображение

Which area of Nym were you using?

Additional context

Clear debian 11, with apt update && apt upgrade.

The launch is unsuccessful only when launched from a regular user. Create command: useradd -m -G adm,cdrom,sudo -s /bin/bash user

Everything was fine here: https://github.com/nymtech/nym/releases/download/nym-binaries-v1.1.20/nym-mixnode

Good works with root user.

github-actions[bot] commented 1 year ago

Thank you for raising this issue

sven-hash commented 1 year ago

You have to change the path in the config.toml because it try to load the pem from /root

craftdome commented 1 year ago

You have to change the path in the config.toml because it try to load the pem from /root

This is not true

изображение

sven-hash commented 1 year ago

Yes, you're right I didn't read well your problem

It was about the certs, please ignore my comment

mmsinclair commented 1 year ago

Hi @Tyz3 the error reported is unable to get local issuer certificate - would you mind checking if updating your Root CA OS package makes any difference?

tommyv1987 commented 9 months ago

No response from user closing ticket, responding to the ticket will enable us to investigate further.