p2p模式下，在root-kuscia-autonomy-alice kuscia容器中调用kuscia的create接口创建节点，提示证书需要base64编码，已经对证书进行base64编码.

Yanziwanglu commented 4 months ago

一、问题场景：在kuscia容器中创建domain节点

二、使用版本： secretpad:0.6.0b0 kuscia:0.7.0b0

三、环境：

NAME="CentOS Linux"
VERSION="7 (Core)"
ID="centos"
ID_LIKE="rhel fedora"
VERSION_ID="7"
PRETTY_NAME="CentOS Linux 7 (Core)"
ANSI_COLOR="0;31"
CPE_NAME="cpe:/o:centos:centos:7"
HOME_URL="https://www.centos.org/"
BUG_REPORT_URL="https://bugs.centos.org/"

CENTOS_MANTISBT_PROJECT="CentOS-7"
CENTOS_MANTISBT_PROJECT_VERSION="7"
REDHAT_SUPPORT_PRODUCT="centos"
REDHAT_SUPPORT_PRODUCT_VERSION="7"

四、问题： 1、命令：

export CTR_CERTS_ROOT=/home/kuscia/var/certs
curl -k -X POST 'https://localhost:8082/api/v1/domain/create' \
 --header "Token: $(cat ${CTR_CERTS_ROOT}/token)" \
 --header 'Content-Type: application/json' \
 --cert ${CTR_CERTS_ROOT}/kusciaapi-server.crt \
 --key ${CTR_CERTS_ROOT}/kusciaapi-server.key \
 --cacert ${CTR_CERTS_ROOT}/ca.crt \
 -d '{
  "domain_id": "rose",
  "role": "partner",
  "cert": "/home/kuscia/var/certs/domain.crt",
  "auth_center": {
    "authentication_type": "Token",
    "token_gen_method": "UID-RSA-GEN"
  }
}'

2、原有证书证书字符串：

3、编码后证书字符串：
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4、提示错误 da7f8b12154c06e910344e618c38e3d

wenkesong-li commented 4 months ago

证书不要使用路径进行传递，使用证书内的值重新尝试一下~

Yanziwanglu commented 4 months ago

使用证书内的值返回success

secretflow / kuscia

p2p模式下，在root-kuscia-autonomy-alice kuscia容器中调用kuscia的create接口创建节点，提示证书需要base64编码，已经对证书进行base64编码. #294