You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@trafficcontrol.apache.org by GitBox <gi...@apache.org> on 2019/12/06 06:34:45 UTC
[GitHub] [trafficcontrol] midchildan commented on issue #4138: Can not
access Traffic Vault API when using SSL
midchildan commented on issue #4138: Can not access Traffic Vault API when using SSL
URL: https://github.com/apache/trafficcontrol/issues/4138#issuecomment-562451804
I’ve also run into this problem while setting up Traffic Control. AFAICT, the main cause of this issue stems from the latest binary release of Riak KV, which ships with a buggy version of erlang (http://erlang.org/pipermail/erlang-questions/2015-June/084868.html).
> Well as far as CDN-in-a-Box goes, Riak is listening on port 8087 for unsecured connections, not port 8088 for HTTPS connections.
I've made numerous attempts to get this working, but Riak also refuses to accept protobuf connections (port 8087). Since it complains about not being able to start a SSL session when SSL is disabled, I think we have the same problem when using protobuf as well.
Here’s some log output that I’ve gathered:
### SSL enabled (`riak-admin security enable`)
#### Traffic Ops
```
ERROR: log.go:172: 2019-12-06T14:57:14.515182211+09:00: riak error: [ERROR] [Node] (<TRAFFIC_VAULT_IP>:8087|0|0) failed healthcheck in createConnection, err: read tcp <TRAFFIC_OPS_IP>:56544-><TRAFFIC_VAULT_IP>:8087: i/o timeout
ERROR: log.go:172: 2019-12-06T14:57:19.5671247+09:00: riak error: [ERROR] [Node] (<TRAFFIC_VAULT_IP>:8087|0|0) failed healthcheck in createConnection, err: read tcp <TRAFFIC_OPS_IP>:56546-><TRAFFIC_VAULT_IP>:8087: i/o timeout
ERROR: log.go:172: 2019-12-06T14:57:24.621252251+09:00: riak error: [ERROR] [Node] (<TRAFFIC_VAULT_IP>:8087|0|0) failed healthcheck in createConnection, err: read tcp <TRAFFIC_OPS_IP>:56548-><TRAFFIC_VAULT_IP>:8087: i/o timeout
ERROR: log.go:172: 2019-12-06T14:57:29.672914624+09:00: riak error: [ERROR] [Node] (<TRAFFIC_VAULT_IP>:8087|0|0) failed healthcheck in createConnection, err: read tcp <TRAFFIC_OPS_IP>:56550-><TRAFFIC_VAULT_IP>:8087: i/o timeout
ERROR: log.go:172: 2019-12-06T14:57:34.725151543+09:00: riak error: [ERROR] [Node] (<TRAFFIC_VAULT_IP>:8087|0|0) failed healthcheck in createConnection, err: read tcp <TRAFFIC_OPS_IP>:56552-><TRAFFIC_VAULT_IP>:8087: i/o timeout
ERROR: log.go:172: 2019-12-06T14:57:39.776810812+09:00: riak error: [ERROR] [Node] (<TRAFFIC_VAULT_IP>:8087|0|0) failed healthcheck in createConnection, err: read tcp <TRAFFIC_OPS_IP>:56554-><TRAFFIC_VAULT_IP>:8087: i/o timeout
ERROR: api.go:136: 2019-12-06T14:57:40.577628207+09:00: <TRAFFIC_ROUTER_IP>:35708 getting cdn ssl keys: getting cdn ssl keys from Riak: with cluster error: riak search error: executing Riak command index 'sslkeys' query 'cdn:kabletown_cdn': ClientError|[Cluster] all retries exhausted and/or no nodes available to execute command
```
#### Riak
```
2019-12-06 14:57:04.689 [error] <0.16781.1>@riak_api_pb_server:handle_info:331 Unrecognized message {error,closed}
2019-12-06 14:57:35.009 [error] <0.16889.1>@riak_api_pb_server:handle_info:331 Unrecognized message {error,closed}
2019-12-06 14:57:40.050 [error] <0.16912.1>@riak_api_pb_server:handle_info:331 Unrecognized message {error,closed}
2019-12-06 14:57:50.156 [error] <0.16945.1>@riak_api_pb_server:handle_info:331 Unrecognized message {error,closed}
2019-12-06 14:57:55.213 [error] <0.16963.1>@riak_api_pb_server:handle_info:331 Unrecognized message {error,closed}
```
### SSL disabled (`riak-admin security disable`)
#### Traffic Ops
```
ERROR: log.go:172: 2019-12-06T13:27:59.452543951+09:00: riak error: [ERROR] [Node] (<TRAFFIC_VAULT_IP>:8087|0|0) failed healthcheck in createConnection, err: RiakError|0|Security not enabled; STARTTLS not allowed.
ERROR: log.go:172: 2019-12-06T13:28:04.45239435+09:00: riak error: [ERROR] [Node] (<TRAFFIC_VAULT_IP>:8087|0|0) failed healthcheck in createConnection, err: RiakError|0|Security not enabled; STARTTLS not allowed.
ERROR: log.go:172: 2019-12-06T13:28:09.452478404+09:00: riak error: [ERROR] [Node] (<TRAFFIC_VAULT_IP>:8087|0|0) failed healthcheck in createConnection, err: RiakError|0|Security not enabled; STARTTLS not allowed.
ERROR: +og.go:172: 2019-12-06T13:28:14.452369829+09:00: riak error: [ERROR] [Node] (<TRAFFIC_VAULT_IP>:8087|0|0) failed healthcheck in createConnection, err: RiakError|0|Security not enabled; STARTTLS not allowed.
ERROR: log.go:172: 2019-12-06T13:28:19.452471924+09:00: riak error: [ERROR] [Node] (<TRAFFIC_VAULT_IP>:8087|0|0) failed healthcheck in createConnection, err: RiakError|0|Security not enabled; STARTTLS not allowed.
ERROR: log.go:172: 2019-12-06T13:28:24.452359545+09:00: riak error: [ERROR] [Node] (<TRAFFIC_VAULT_IP>:8087|0|0) failed healthcheck in createConnection, err: RiakError|0|Security not enabled; STARTTLS not allowed.
ERROR: api.go:136: 2019-12-06T13:28:25.894461608+09:00: <TRAFFIC_ROUTER_IP>:34570 getting cdn ssl keys: getting cdn ssl keys from Riak: with cluster error: riak search error: executing Riak command index 'sslkeys' query 'cdn:kabletown_cdn': ClientError|[Cluster] all retries exhausted and/or no nodes available to execute command
```
#### Riak
no logs
----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
With regards,
Apache Git Services