You are viewing a plain text version of this content. The canonical link for it is here.
Posted to notifications@apisix.apache.org by GitBox <gi...@apache.org> on 2022/04/08 12:29:02 UTC
[GitHub] [apisix] DwGoing opened a new issue, #6812: AdminAPI /ssl can not work
DwGoing opened a new issue, #6812:
URL: https://github.com/apache/apisix/issues/6812
### Description
It show "key and cert don't match" when i request the api by dashboard.
It show "failed to parse key: PEM_read_bio_PrivateKey() failed" when i request the api by postman.
Dose the cert have problems?
``` shell
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
```
``` shell
-----BEGIN ENCRYPTED PRIVATE KEY-----
MIIJpDBOBgkqhkiG9w0BBQ0wQTApBgkqhkiG9w0BBQwwHAQIBeEqjo8rSSsCAggA
MAwGCCqGSIb3DQIJBQAwFAYIKoZIhvcNAwcECNcYX2gBaTKfBIIJUOykNlX4zWeW
DkdN0FOgPyf1LZsrmBbtDCTH3U7i7NVSfZLCZ/5+qBrwo+VNbltogVsHuONQT7Hu
OMWGtXaFraU8R8/H7qLATu59SjOVlCCLon3dyA0talUGEXYWL5H+hinvtECaOHwX
Us2P7o4TtzeLDVyCZkh2S+8yEw+0mUBU9hKg3i0G5y4N5f6e/Ohk4QJUblO77IFw
rXY1KM6IF8A9wngqGqBeOcYMf0GYbEghSYO557k+WZQRxgE1a5vSP09HBaGGKe8y
vUFmRTYdPwKy4o5yYveSnwM06/VrXJxw4vukmsc2mEv5zSeYUEH+9+r5VFsGqBxB
tYSM7EkwGs7N7/QDyXFjbESFaOehwlKeO6bByJymiyQx3HeM4ubt5mjso6HHOTDx
2hj3olDVBz9sc2IAetxzdQVXNGL0aXpPu8fB8gMw6rcWjf1H0EPnqemlNbsOBM7h
kZcdcXfL5io59UcyyZrB7ofXIdN4hO4gRdktBN12DxsLmhEFagYyc2Py2isA2jwh
mHrESXu+OAja6g8e8H2gDqQvjY62+gJ23FGwYxU+mGRF9+1L0K37KH3Q9rwo6A3D
EYb67c613YUhc+wikPKMjc1bJ6i/bGNfkTojVjRrpIFV/0TRZAcQ6VzkQ+4NGrMs
18ARwq7x5b5xBwQaKCAl4iQrIUWv5DQ26NZ4I540YbaOaKzWYomMzCUB++EQ81jh
5PbLw1/79zhcZfmheBbXOUgwyBARWNOjL5E+AjOspKTX4h2M0DK1XXEID93x29p+
OmAmvj8+YGB+KA/Tfz7kU9/S9V+v2K8n+yXIT81k2i1eV0ME32oWJAwACvulaVo5
+StfnID5NZjpUA4IwHJR8bIQxW77g4hz+u6i3NBYYv7ZH8mK6dHXK7EBs4On5PaC
sfjTIDa8MhPT6k0mDM0pSExB6W3VFEy5lm1pIcpvvmOF5bCKyUU9WZPzUTlfXkkR
nK6cuCnbIZNgQLGPS4+DbX56aq5D5NLIXaFbRwStIfCe6YcljayjnQzxegEvgJvD
65GJJORLfPqGZc7/LAAX526IvqxK2q0Lc51FSe0riM5Jk7CXC0CU8+alZVeZ+xiN
qa4P4OD+VzoJN9uglgmTRneXfQlYfrWY6RUtDwcd6cL8dgjJ2jSOX5BbMXs5J1sh
IJih79uqsnOaMj8egvxQy2evlHDBX9bjZtjyhI5ElxnOhjM8C+twMpb4x3+F9+ua
77wAvE8LePDa2F3obA3hRJnDZVWMULxVus0ayiUIX4BtFeBy2PYj1BQAw81JKbsT
6m5OvLbA6EmQ7NJRGNtnCXHF7L3VJkOljaB7hApRNsS0EA24oDnS8yjEcKHn4r5W
9BRnS9+IqeLlCcP64q3sTdfuiH6uv3WMiAWkzgLX90dRgE5MguNVxK3TvYPGK9zL
zZ/P6s1GMaOFmSuqGP/r1M65z5EvRh9leVd1Yb0Lql213fmMwtMolPDHBuwQdNhk
h+Omavjwszu42fuf9PfCGTBcUzOPO7IXC5TVvjnQFBqZFjcBr3XWkS8G2aGe511Q
131RVPkZBvzjk89TeAO6/D7/iW1ZDivgv4CQpdi1WrgaVT/zv3wZYZ4QC+XNselk
0yHqvUkvLTM9OCmPbhdcVqs2FUqAVRqYzIGLi8ygVrRbXEL5E2K5JJWulpi2us21
am5NDa9vY+XHXPbDCIaoUegawlhBmf5z5JUZ3YxVLgcIC43Xu6PztV0SFCrxYoVe
WmnqtGj+2hjzB3tOmw2s0k/plmuYqhQeFu7hie3lhqHH0NfiHPNeG9ZTExoC3eeN
ythjo1xF0Ug3Ah8XzNbaKjreWu8AMuB9NpWOyRqq9RfyDPu8SApKMyYUJ6Dw7yKL
oHbJbr7Ye6j6QQSecvoXOxABXJatgsNwyfL7TGWgjt55SmXpmp/im+QS0owU8E/G
rZ9s28TJeSwke50Cyq82ecnPjnRisi03D+V5t/4O9p9WRFW9qrC+ZVH2K4Nois9O
f0P64iyVoZRpujxsZYUNg0dxroXxv+r4Gns9mpPBL9z660VD6kDG7KH7B7Vwx5T4
VWDvc6VZ16iTl+9wj+izWFnUXGXQCbw4QjqxiETX0HxqPOgB9TMnk8e1a0PHHZcu
E62oOrKBhdI2SY35jLCQmu3twUzGz4LC50bKLaz3dfmSpVHK7ugE01Zwmr6JXTjA
DEGu2/6TWnw+2U9WLiyEnjsWvCOAhXPICFOwI1vuP382mzX/XSDI/etgDoXr3lVg
2i28WCHz+Ok4uB9Dxby7ezno36lM7hVC9/JBOPNvy43INnxPxNjtYxZkvqCwUZOO
IOQM47YeJpsIp5mWjeOofrDAcEPIiyeLsslYrbaDGDGIm9fDPU3scGztivGkzEAd
OEPETyNqm0u/dLDcIAP3zSUNAEHbXAvSJwZIe7VN9pRVqHsO9t5v8jkaRCv7XKJ1
aUhTBTg4EWp4gr24H6LZlOjWbDZELj1m5ggY/orQ3gE/9Vj5/ZYqu8Qg/NsZAHkW
bsG7pZyh0x9VeNwsMjlbXy236tgDsPMttTvP5cQNHkZtga7/R+BXVkIkizXRYs2H
V61rk9IXeqop1hxySmS5YPVZdk/UmjD+wVL7V2EKT3a1bVxxtal1kjXgrPP8XSyF
5MRGmYsQhc+g/3Koe32E/o4l/Xaq6LZIbK8rnJpOx+ge2crdi9Vm5NhoXW3jWppP
fCIGpkg7FKqeGwPLggjued5sCCfBpsVyH+SxAx6as+Mcan6EQUQFrKisSO0l2uR7
G9fcteRyY287hdRFP7Aco9CjpfbqldUaLhJNJo6MqgaYo+EMVojSc0tEstIyaI8K
ZiMqNqL0v3AmfqcHpgRoSPcz9DoECgwVAg6gL1Jh3/vPYV9uCHEAjtSc7N5iZiPR
qqIqpzpS8pczYaht5UPZK6ZcOcIH3hKGZi6TkqdSFicyP/bNJI/QRH7nvBh4g6KV
4n9oLwMGv9Gdz126FuUQ/2WuA8Vt/QNhrrOZXob4+WU/YcLezzMp8x8ovofulA5p
uQwrIOacEsfwPJqNcIlpiTgzezK7hHsCqQMpU+qDXAIuPaTt8Q3FPUZvwMN0uFvm
20qCO429Oipi95A+wu80sbDrXbzmP7ZK6GE7JNhAYgY0Y62sf45IJBQja3YJ5LVO
Y5SCvkCOxMjNbguhjyhSuMcqe5UNWdPz
-----END ENCRYPTED PRIVATE KEY-----
```
### Environment
- APISIX version (run `apisix version`):
- Operating system (run `uname -a`):
- OpenResty / Nginx version (run `openresty -V` or `nginx -V`):
- etcd version, if relevant (run `curl http://127.0.0.1:9090/v1/server_info`):
- APISIX Dashboard version, if relevant:
- Plugin runner version, for issues related to plugin runners:
- LuaRocks version, for installation issues (run `luarocks --version`):
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@apisix.apache.org.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [I] AdminAPI /ssl can not work [apisix]
Posted by "mingmingshiliyu (via GitHub)" <gi...@apache.org>.
mingmingshiliyu commented on issue #6812:
URL: https://github.com/apache/apisix/issues/6812#issuecomment-1751613015
> https://apisix.apache.org/docs/apisix/tutorials/client-to-apisix-mtls/#configure-the-certificate-in-apisix same error.
>
> ```
> {"error_msg":"failed to parse cert: PEM_read_bio_X509_AUX() failed"}
> ```
>
> ```shell
> [root@apisix mtls]# curl -X PUT 'http://127.0.0.1:9180/apisix/admin/ssls/1' \
> --header 'X-API-KEY: edd1c9f034335f136f87ad84b625c8f1' \
> --header 'Content-Type: application/json' \
> -d '{
> "sni": "test.com",
> "cert": "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",
> "key": "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",
> "client": {
> "ca": "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"
> }
> }'
>
> [root@apisix mtls]# cat server.key
> -----BEGIN RSA PRIVATE KEY-----
> MIIEpQIBAAKCAQEAwBVk+Xtr3yEqUD+5ALzwFtMAqPKBPwVJyoxl/W/JclCx18E/
> Hr/pnILFfJ/RfzxQArzzvetPEjpZLyVFsL4mdW4/gBkogWya6T8tUJW6nxP8gCGu
> o8vxfPUQzNxhjCT4UfISz1JquWjN+uEydZLXQbz9WXlT3RWMdhF/HMu8oeP0bBHQ
> j0ZA4ikt36NRF06d3EKY79o6WOOg/PFhYbmNPHWm30Gl75Un78DWpGl3YtAw+8md
> dgyKJR6RC5+b0ThVUlos90Ud3C1F6wHTzUuGhO+3R6kyyw7oReNvefvlHv1H2Krd
> vy4ijr+5J//kRzd6lVTmS97EmIPmfwscndDxiwIDAQABAoIBAQCB0bPV3XFxc1PK
> utaJRiip9F+cz5FEi4lsyGjh2Zx3k0wu+p9zY9c6fTOF3+nSKWwV/ahqck+VjTPb
> ZkBsjIcnlKR8KgSzPDiSba1tqlRf0T01SA5lC6AhiOua2VNgSVg+4fGOhzA0MT4N
> UggtaFntRxKfVx2z7S1qWrbjOls5uc/Tk95x3XzQqUAgaz5CVgwc3c2fxM6+eh9U
> hdU8R8hS1oyQF6Ps1DCcdN393Zd9kv93exh6pSozBcDc90v1ApPrbPGYnhFfFgA5
> k65oqX/OIMpG7olTmRyKagcZ0kgxJd6AJ/3arO7rBAfGJgpJspBcTzdgzNgpy/6k
> FXTdf5jRAoGBAOhvtx3FQGcIE2ZURevBDinoAHMzyNlf7LNlL4AOznGmizacKR6z
> s/fShoYCiL4lUiB+agidsiLLmP2dXcvfSCP8awMz7d4DvNHAMeLOAema7A41wNc5
> SBwwxyp1ZriCNXO7Pra/3BRpaGiWFgdcf747a9qpFYriZf6hJu78qSVzAoGBANOO
> bR+58y27Uz3xfuQa+q8Eb61PuCA0IFRD7X7Bn194Zk0DiQwYRTEDFtkiBxHe8Ilr
> 2hOVcZTIZNidgVHsP3kjBY21Q2/JghdzqnXNEX1KL1pCeD9aKWvNIHftI1fWFf1K
> EVj1fZEwbURokREmREqzNYS1dX1LoX1P1mHlQr2JAoGAW07vf2lqeE8K1+sJIKjR
> OJMkAh14rDPrlzmLpGGspabID2bfHGl5rEPuhpxePVwJ3Cvs2X+hZ9vVOOPl4d3P
> yBszqqluqwWK2lcHAdLtm2g5jQd+vs2Iz1I2Gy7NcHPuLY2EAGR0Pyx9UICNHM0w
> fXl4UAiWJt3zNUj3M3DbvZMCgYEAqrPEx5HSb7c0XsoLGmHOnwQUXKLzrkCBSZ0Z
> +Gqhf3Z2DXRp0/GNexPEDuZPEBN0wV3eNGkkoenkvYixvXnEaalhpMt7I6tUJjo1
> dCJJF3CRruHthyjoPUziAwK8vvZG/f8S6lYDwPBzanx5eX4IIsJhz7hfmf85yhRu
> psVHygkCgYEAov0q+p/qJ+/Swk1S9rpyfowmwm3dbXBkG8zPlAJAIKaU2h7yxFc3
> ZvI8uyuE8NWqk9d9P7BqBNSwwlfIeU0G8bEL0jKVRJ9yUnSfG37BTC3f4VqvMdVp
> Nk8Fbt0uaa3LvFwzy1pp/t1esrPQCutnTXdmxWQa6BMMheeEQ60ctZc=
> -----END RSA PRIVATE KEY-----
> [root@apisix mtls]#
> [root@apisix mtls]# cat server.cer
> -----BEGIN CERTIFICATE-----
> MIICojCCAYoCCQD+WfDmPFFowjANBgkqhkiG9w0BAQsFADARMQ8wDQYDVQQDDAZS
> T09UQ0EwIBcNMjMwMzIyMDM0ODQxWhgPMjEyMzAyMjYwMzQ4NDFaMBMxETAPBgNV
> BAMMCHRlc3QuY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwBVk
> +Xtr3yEqUD+5ALzwFtMAqPKBPwVJyoxl/W/JclCx18E/Hr/pnILFfJ/RfzxQArzz
> vetPEjpZLyVFsL4mdW4/gBkogWya6T8tUJW6nxP8gCGuo8vxfPUQzNxhjCT4UfIS
> z1JquWjN+uEydZLXQbz9WXlT3RWMdhF/HMu8oeP0bBHQj0ZA4ikt36NRF06d3EKY
> 79o6WOOg/PFhYbmNPHWm30Gl75Un78DWpGl3YtAw+8mddgyKJR6RC5+b0ThVUlos
> 90Ud3C1F6wHTzUuGhO+3R6kyyw7oReNvefvlHv1H2Krdvy4ijr+5J//kRzd6lVTm
> S97EmIPmfwscndDxiwIDAQABMA0GCSqGSIb3DQEBCwUAA4IBAQBeqddYSz8Ulv17
> W8Ypi2OlZe28BA9nx27nFkq+JFEbsw8W9K7GacvAeia/xLnh3iep7PfF7ffg17r+
> xqmE/QZ416hd8LtM0snqRHI1yYfkoS9j/PYtDLLVStAAFeXF3T23fbuLjJourj0p
> VVXc6zffgQOrnuuGqnHP1OUPsmunN7nYC8sSzdyJaH3a4QJaIBmiVcMDfe4t+VRt
> llH/npQtNfcpiNz/NXVBKMVPBxH0d3mucd1fBHiR8JPrAqpUSlZv5q4qW7aQZQ+k
> w6AwO1xpRXn0rEhtJIpMLeeKHYCFuE6zEyAjaZo6loK064MbwTVlpEgGD2uAdXGZ
> il5B/bui
> -----END CERTIFICATE-----
> [root@apisix mtls]#
> [root@apisix mtls]# cat client.cer
> -----BEGIN CERTIFICATE-----
> MIICoDCCAYgCCQD+WfDmPFFowzANBgkqhkiG9w0BAQsFADARMQ8wDQYDVQQDDAZS
> T09UQ0EwIBcNMjMwMzIyMDM0ODUwWhgPMjEyMzAyMjYwMzQ4NTBaMBExDzANBgNV
> BAMMBkNMSUVOVDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMM6cFnH
> KfTHigisyHdFD7+29+ELfjcyVN6Xffhf6NrQX3+9HOvkXIhC5in4IpD5NxKrySpI
> BsshJVKLBIit4WnZbgPZuz4PhLE9od6GqV+Qb12o2ZfpxFtwbl01S8ohVFNgDq+G
> qdL6dO/txphtJuBmCkMxIdn+Q8VbpzS3PRNErulNGdEZNDbEhUp8RXd9ixSZhIsG
> AakqKnIdS0boP79pocliEeKe/B9PNJkP2ecbOeZxvhUnssmXPxjg3rOxQqbCkAvM
> rBFllj/8F8BkQror9YaV+8ah/nJTnGVQMsADkUqWfK8+Iyeu1YVFbC9kdch1QQIb
> QQKTIEfFiUqaBK8CAwEAATANBgkqhkiG9w0BAQsFAAOCAQEAgJAcWv/cFIMBtRqd
> Cm5lHsxAuAh4AxSGznO1vRphFD9NhJpe7cwdTwK7D9WNMotpOlGpQU2mKnGP0G/i
> QoeOQs88drShzG1I0Ru5aHY9TYU08c0AEZNlNJCZXcLOi+Ss/tAmmW8Mf1Pa24ls
> Fy+5BvpXFPFWIyerJPoBvsFETfVYyuvJzw1t//10y7f+AuDC23dxW4FVgO+0a8Hd
> Q3NwdpcvYoUnOGWL+y5QEh/nlaChkB2jCLs+5Yp43+eI4JWzu1XOyEfUBMp4Yzso
> iF20uMqli8RJR1nRvF9j78jiYXxAxGFqmFSxenoRtJX9Zij2fBiN+1wCXXhf8bbZ
> qttRCA==
> -----END CERTIFICATE-----
> ```
did you resolve it?
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@apisix.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [apisix] DwGoing commented on issue #6812: AdminAPI /ssl can not work
Posted by GitBox <gi...@apache.org>.
DwGoing commented on issue #6812:
URL: https://github.com/apache/apisix/issues/6812#issuecomment-1094235153
@tokers I have tried it.
I found that i can not configurate the selection of "tcp" in value.yaml, because i ran apisix by helm.
<img width="506" alt="image" src="https://user-images.githubusercontent.com/16076018/162612848-ec284220-2eed-485e-8ebd-25ba7b39c35f.png">
It's gateway configuration in my value.yaml.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@apisix.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [I] AdminAPI /ssl can not work [apisix]
Posted by "freemankevin (via GitHub)" <gi...@apache.org>.
freemankevin commented on issue #6812:
URL: https://github.com/apache/apisix/issues/6812#issuecomment-1751896388
It's been so long that I forgot about it. It should have been solved.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@apisix.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [I] AdminAPI /ssl can not work [apisix]
Posted by "kayx23 (via GitHub)" <gi...@apache.org>.
kayx23 closed issue #6812: AdminAPI /ssl can not work
URL: https://github.com/apache/apisix/issues/6812
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@apisix.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [apisix] tzssangglass commented on issue #6812: AdminAPI /ssl can not work
Posted by GitBox <gi...@apache.org>.
tzssangglass commented on issue #6812:
URL: https://github.com/apache/apisix/issues/6812#issuecomment-1093171974
> It show "failed to parse key: PEM_read_bio_PrivateKey() failed" when i request the api by postman.
looks like your key file has problem. take a look at this test case: https://github.com/apache/apisix/blob/51eec3ea64bba464ab4a6741acc318c502cab26c/t/admin/ssl2.t#L240-L269
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@apisix.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [apisix] tokers commented on issue #6812: AdminAPI /ssl can not work
Posted by GitBox <gi...@apache.org>.
tokers commented on issue #6812:
URL: https://github.com/apache/apisix/issues/6812#issuecomment-1098831843
> stream_proxy mTLS TCP bidirectional authentication May I ask how to configure this? I failed to configure it according to the document
Please do not ask questions in irrelevant issues, instead, create another one, with contexts.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@apisix.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [apisix] tokers commented on issue #6812: AdminAPI /ssl can not work
Posted by GitBox <gi...@apache.org>.
tokers commented on issue #6812:
URL: https://github.com/apache/apisix/issues/6812#issuecomment-1093614847
@DwGoing Your key was encrypted. Use the command below to decrypt it.
```shell
openssl rsa -in enckey.key -out deckey.key
```
You'll be asked to type the password.
By the way, if this private key is important, please do not paste it in public channel.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@apisix.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [apisix] DwGoing commented on issue #6812: AdminAPI /ssl can not work
Posted by GitBox <gi...@apache.org>.
DwGoing commented on issue #6812:
URL: https://github.com/apache/apisix/issues/6812#issuecomment-1094038655
@tokers Thanks for your reply!
I will try it.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@apisix.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [apisix] tokers commented on issue #6812: AdminAPI /ssl can not work
Posted by GitBox <gi...@apache.org>.
tokers commented on issue #6812:
URL: https://github.com/apache/apisix/issues/6812#issuecomment-1094434691
> > @DwGoing I'm afraid the helm chart of APISIX is lagging, we don't add the `tls` flag for it, if you really need this feature, you may have to modify the helm chart template, adding the field according to the link given by @tzssangglass .
>
> I get it. Thanks for your reply.
By the way, If you solved the problem successfully, welcome to contribute a PR to add the `tls` flag 😁.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@apisix.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [apisix] DwGoing commented on issue #6812: AdminAPI /ssl can not work
Posted by GitBox <gi...@apache.org>.
DwGoing commented on issue #6812:
URL: https://github.com/apache/apisix/issues/6812#issuecomment-1094219182
@tokers I had submitted the ssl successfully, but it seems like it has no effect.
I just want to receive tcp stream by the same port.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@apisix.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [apisix] tokers commented on issue #6812: AdminAPI /ssl can not work
Posted by GitBox <gi...@apache.org>.
tokers commented on issue #6812:
URL: https://github.com/apache/apisix/issues/6812#issuecomment-1094255474
@DwGoing I'm afraid the helm chart of APISIX is lagging, we don't add the `tls` flag for it, if you really need this feature, you may have to modify the helm chart template, adding the field according to the link given by @tzssangglass .
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@apisix.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [apisix] DwGoing commented on issue #6812: AdminAPI /ssl can not work
Posted by GitBox <gi...@apache.org>.
DwGoing commented on issue #6812:
URL: https://github.com/apache/apisix/issues/6812#issuecomment-1094255956
> @DwGoing I'm afraid the helm chart of APISIX is lagging, we don't add the `tls` flag for it, if you really need this feature, you may have to modify the helm chart template, adding the field according to the link given by @tzssangglass .
I get it. Thanks for your reply.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@apisix.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [apisix] tzssangglass commented on issue #6812: AdminAPI /ssl can not work
Posted by GitBox <gi...@apache.org>.
tzssangglass commented on issue #6812:
URL: https://github.com/apache/apisix/issues/6812#issuecomment-1094229315
> I just want to receive tcp stream by the same port.
> I don't know if it can be achieved by sni.
see: https://github.com/apache/apisix/blob/master/docs/en/latest/stream-proxy.md#accept-tls-over-tcp-connection
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@apisix.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [apisix] LivesMountain commented on issue #6812: AdminAPI /ssl can not work
Posted by GitBox <gi...@apache.org>.
LivesMountain commented on issue #6812:
URL: https://github.com/apache/apisix/issues/6812#issuecomment-1098808061
stream_proxy mTLS
TCP bidirectional authentication
May I ask how to configure this? I failed to configure it according to the document
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@apisix.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [apisix] freemankevin commented on issue #6812: AdminAPI /ssl can not work
Posted by "freemankevin (via GitHub)" <gi...@apache.org>.
freemankevin commented on issue #6812:
URL: https://github.com/apache/apisix/issues/6812#issuecomment-1478983583
https://apisix.apache.org/docs/apisix/tutorials/client-to-apisix-mtls/#configure-the-certificate-in-apisix
same error.
```shell
[root@apisix mtls]# curl -X PUT 'http://127.0.0.1:9180/apisix/admin/ssls/1' \
--header 'X-API-KEY: edd1c9f034335f136f87ad84b625c8f1' \
--header 'Content-Type: application/json' \
--data-raw '{
"sni": "test.com",
"cert": "MIICojCCAYoCCQD+WfDmPFFowjANBgkqhkiG9w0BAQsFADARMQ8wDQYDVQQDDAZST09UQ0EwIBcNMjMwMzIyMDM0ODQxWhgPMjEyMzAyMjYwMzQ4NDFaMBMxETAPBgNVBAMMCHRlc3QuY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwBVk+Xtr3yEqUD+5ALzwFtMAqPKBPwVJyoxl/W/JclCx18E/Hr/pnILFfJ/RfzxQArzzvetPEjpZLyVFsL4mdW4/gBkogWya6T8tUJW6nxP8gCGuo8vxfPUQzNxhjCT4UfISz1JquWjN+uEydZLXQbz9WXlT3RWMdhF/HMu8oeP0bBHQj0ZA4ikt36NRF06d3EKY79o6WOOg/PFhYbmNPHWm30Gl75Un78DWpGl3YtAw+8mddgyKJR6RC5+b0ThVUlos90Ud3C1F6wHTzUuGhO+3R6kyyw7oReNvefvlHv1H2Krdvy4ijr+5J//kRzd6lVTmS97EmIPmfwscndDxiwIDAQABMA0GCSqGSIb3DQEBCwUAA4IBAQBeqddYSz8Ulv17W8Ypi2OlZe28BA9nx27nFkq+JFEbsw8W9K7GacvAeia/xLnh3iep7PfF7ffg17r+xqmE/QZ416hd8LtM0snqRHI1yYfkoS9j/PYtDLLVStAAFeXF3T23fbuLjJourj0pVVXc6zffgQOrnuuGqnHP1OUPsmunN7nYC8sSzdyJaH3a4QJaIBmiVcMDfe4t+VRtllH/npQtNfcpiNz/NXVBKMVPBxH0d3mucd1fBHiR8JPrAqpUSlZv5q4qW7aQZQ+kw6AwO1xpRXn0rEhtJIpMLeeKHYCFuE6zEyAjaZo6loK064MbwTVlpEgGD2uAdXGZil5B/bui",
"key": "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",
"client": {
"ca": "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"
}
}'
[root@apisix mtls]# cat server.key
-----BEGIN RSA PRIVATE KEY-----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-----END RSA PRIVATE KEY-----
[root@apisix mtls]#
[root@apisix mtls]# cat server.cer
-----BEGIN CERTIFICATE-----
MIICojCCAYoCCQD+WfDmPFFowjANBgkqhkiG9w0BAQsFADARMQ8wDQYDVQQDDAZS
T09UQ0EwIBcNMjMwMzIyMDM0ODQxWhgPMjEyMzAyMjYwMzQ4NDFaMBMxETAPBgNV
BAMMCHRlc3QuY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwBVk
+Xtr3yEqUD+5ALzwFtMAqPKBPwVJyoxl/W/JclCx18E/Hr/pnILFfJ/RfzxQArzz
vetPEjpZLyVFsL4mdW4/gBkogWya6T8tUJW6nxP8gCGuo8vxfPUQzNxhjCT4UfIS
z1JquWjN+uEydZLXQbz9WXlT3RWMdhF/HMu8oeP0bBHQj0ZA4ikt36NRF06d3EKY
79o6WOOg/PFhYbmNPHWm30Gl75Un78DWpGl3YtAw+8mddgyKJR6RC5+b0ThVUlos
90Ud3C1F6wHTzUuGhO+3R6kyyw7oReNvefvlHv1H2Krdvy4ijr+5J//kRzd6lVTm
S97EmIPmfwscndDxiwIDAQABMA0GCSqGSIb3DQEBCwUAA4IBAQBeqddYSz8Ulv17
W8Ypi2OlZe28BA9nx27nFkq+JFEbsw8W9K7GacvAeia/xLnh3iep7PfF7ffg17r+
xqmE/QZ416hd8LtM0snqRHI1yYfkoS9j/PYtDLLVStAAFeXF3T23fbuLjJourj0p
VVXc6zffgQOrnuuGqnHP1OUPsmunN7nYC8sSzdyJaH3a4QJaIBmiVcMDfe4t+VRt
llH/npQtNfcpiNz/NXVBKMVPBxH0d3mucd1fBHiR8JPrAqpUSlZv5q4qW7aQZQ+k
w6AwO1xpRXn0rEhtJIpMLeeKHYCFuE6zEyAjaZo6loK064MbwTVlpEgGD2uAdXGZ
il5B/bui
-----END CERTIFICATE-----
[root@apisix mtls]#
[root@apisix mtls]# cat client.cer
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
```
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@apisix.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org