search

openconfig / gnmi

gRPC Network Management Interface
Apache License 2.0
459 stars 196 forks source link

Tunnel server not sending client's "certificate request" TLS message with "skip-verify=false" #143

Closed Shikha-Chowdhary closed 1 year ago

Shikha-Chowdhary commented 1 year ago

Hello,

I am using the following config file for making a secure tunnel server with insecure gNMIC client.

_insecure: true log: true username: ADMIN password: ADMIN

tunnel-server: address: ":50051" skip-verify: false ca-file: /home/shikha/client.crt cert-file: /home/shikha/secure-tunnel/gnmi/cmd/gnmi_collector/certs1/cert.pem key-file: /home/shikha/secure-tunnel/gnmi/cmd/gnmicollector/certs1/key.pem client-auth: request target-wait-time: 20s enable-metrics: false debug: false ~

Let me know if I am setting the options incorrectly? Also, hope we can run a insecure gNMIC client from a secure tunnel server or Is it mandatory to run both in either secure/insecure mode together? GNMIC

karimra commented 1 year ago

@Shikha-Chowdhary I believe you opened the issue in the wrong repo, it should be openconfig/gnmic

The issue you are reporting is a known one and was fixed in gnmic#94. The fix is not part of the latest release yet, I'm in the process of releasing gNMIc v0.30.0. You should be able to try it in a couple of hours.

Meanwhile, if you'd like, please open an issue in openconfig/gnmic to follow this up.

Shikha-Chowdhary commented 1 year ago

@Shikha-Chowdhary I believe you opened the issue in the wrong repo, it should be openconfig/gnmic

The issue you are reporting is a known one and was fixed in gnmic#94. The fix is not part of the latest release yet, I'm in the process of releasing gNMIc v0.30.0. You should be able to try it in a couple of hours.

Meanwhile, if you'd like, please open an issue in openconfig/gnmic to follow this up.

My apologies for raising it in incorrect repo. Let me try the latest version once it's available. If still not resolved, will open the issue in openconfig/gnmic

-Thanks a lot