search

openziti / ziti-sdk-c

A C-based sdk for delivering secure applications over a Ziti Network
https://docs.openziti.io/docs/reference/developer/sdk/ziti-sdk-c
Apache License 2.0
71 stars 14 forks source link

ziti-sdk-c enroll fails for legit certificate #502

Closed dovholuknf closed 1 year ago

dovholuknf commented 1 year ago

I have a legitimate cert from a third party, LetsEncrypt, and the ziti-sdk-c fails when enrolling:

ziti-edge-tunnel.exe enroll -j c:\temp\clintrock.jwt -i c:\temp\clintrock.json

(34472)[        0.000]    INFO ziti-sdk:utils.c:173 ziti_log_set_level() set log level: root=3/INFO
(34472)[        0.000]    INFO ziti-sdk:utils.c:173 ziti_log_set_level() set log level: root=3/INFO
(34472)[        0.000]    INFO ziti-sdk:ziti_enroll.c:92 ziti_enroll() Ziti C SDK version 0.31.4 @68c3a76(HEAD) starting enrollment at (2023-04-10T19:56:31.537)
(34472)[        0.000]    INFO ziti-sdk:ziti_ctrl.c:409 ziti_ctrl_init() ctrl[ctrl.clint.demo.openziti.org] ziti controller client initialized
(34472)[        0.178]    INFO ziti-sdk:ziti_enroll.c:41 verify_controller_jwt() verifying JWT signature
(34472)[        0.178]   ERROR ziti-sdk:ziti_enroll.c:66 verify_controller_jwt() failed to verify JWT signature
(34472)[        0.178]   ERROR ziti-sdk:ziti_ctrl.c:155 ctrl_resp_cb() ctrl[ctrl.clint.demo.openziti.org] request failed: -4079(software caused connection abort)
(34472)[        0.178]   ERROR ziti-sdk:ziti_enroll.c:219 well_known_certs_cb() D:/a/desktop-edge-win/desktop-edge-win/ziti-edge-tunnel/deps/ziti-tunneler-sdk-c/build/_deps/ziti-sdk-c-src/library/ziti_enroll.c:148 - ZITI_JWT_VERIFICATION_FAILED => -7 (JWT verification failed)
(34472)[        0.178]   ERROR ziti-edge-tunnel:ziti-edge-tunnel.c:2008 enroll_cb() enrollment failed: CONTROLLER_UNAVAILABLE(-7)

The ziti CLI will correctly enroll this identity

dovholuknf commented 1 year ago

fixed in the latest tunneler!