You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@trafficcontrol.apache.org by GitBox <gi...@apache.org> on 2021/07/26 23:27:35 UTC
[GitHub] [trafficcontrol] rawlinp opened a new pull request #6062: Fix TV Postgres reencrypt tool
rawlinp opened a new pull request #6062:
URL: https://github.com/apache/trafficcontrol/pull/6062
The "id" column of the "sslkey" table was removed, but the queries in
the reencrypt tool were not updated. Change the queries to select and
update by the "deliveryservice" (XML ID) column instead.
Also, fix some error logging where the error was not being appended to
the message.
Closes: #6061
## Which Traffic Control components are affected by this PR?
- Traffic Vault
## What is the best way to verify this PR?
Generate an SSL key for a delivery service in your CDN, then run the following with an old and new version of the AES key:
```
./reencrypt --previous-key ~/go/src/github.com/apache/trafficcontrol/traffic_ops/app/conf/new.key --new-key ~/go/src/github.com/apache/trafficcontrol/traffic_ops/app/conf/aes.key
```
Reconfigure `aes_key_location` in cdn.conf to the location of the new key, restart TO, and make sure the SSL cert can be retrieved properly via TP.
Note: you can create an AES key via `openssl rand -base64 32 > new.key`
## If this is a bug fix, what versions of Traffic Control are affected?
- master
## The following criteria are ALL met by this PR
- [ ] This tool currently doesn't have automated tests, but we should add some
- [x] Bugfix, no docs necessary
- [x] Unreleased, no changelog necessary
- [x] This PR includes any and all required license headers
- [x] This PR **DOES NOT FIX A SERIOUS SECURITY VULNERABILITY** (see [the Apache Software Foundation's security guidelines](https://www.apache.org/security/) for details)
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: issues-unsubscribe@trafficcontrol.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [trafficcontrol] rawlinp commented on pull request #6062: Fix TV Postgres reencrypt tool
Posted by GitBox <gi...@apache.org>.
rawlinp commented on pull request #6062:
URL: https://github.com/apache/trafficcontrol/pull/6062#issuecomment-888480901
`WIP` label removed, ready for review.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: issues-unsubscribe@trafficcontrol.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [trafficcontrol] rawlinp commented on pull request #6062: Fix TV Postgres reencrypt tool
Posted by GitBox <gi...@apache.org>.
rawlinp commented on pull request #6062:
URL: https://github.com/apache/trafficcontrol/pull/6062#issuecomment-889543965
Rebased due to conflict https://github.com/apache/trafficcontrol/pull/6065/files#diff-1eee1a599706fea7cd67d1d9413a0bcc8d1a11dade2f0adb9178460aba851177R55-R56 (just updated those lines to add the `--diff-filter=d` option.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: issues-unsubscribe@trafficcontrol.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [trafficcontrol] mattjackson220 merged pull request #6062: Fix TV Postgres reencrypt tool
Posted by GitBox <gi...@apache.org>.
mattjackson220 merged pull request #6062:
URL: https://github.com/apache/trafficcontrol/pull/6062
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: issues-unsubscribe@trafficcontrol.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org