search

opensciencegrid / xrootd-monitoring-shoveler

XRootD monitoring flow packet shoveler
Apache License 2.0
2 stars 7 forks source link

problem with CA certificates #22

Closed pavel-demin closed 7 months ago

pavel-demin commented 10 months ago

I have installed the RPM file (version 1.2.2) but the service crashes with the following error message:

Nov  9 14:05:56 xrootd-monitoring-shoveler: time="2023-11-09T14:05:56+01:00" level=error msg="Failed to connect using TLS: tls: failed to verify certificate: x509: certificate signed by unknown authority"
Nov  9 14:05:56 xrootd-monitoring-shoveler: panic: runtime error: invalid memory address or nil pointer dereference
Nov  9 14:05:56 xrootd-monitoring-shoveler: [signal SIGSEGV: segmentation violation code=0x1 addr=0x0 pc=0x637c54]

I had to add the following line to xrootd-monitoring-shoveler.service to make it work:

Environment="SSL_CERT_DIR=/etc/grid-security/certificates"
kazeborja commented 10 months ago

Thanks Pavel, I do think this falls in the "lack of documentation" category, so will make sure it's updated :) Also, it should allow the service environment variables to be updated from a sysconfig file most probably