You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@trafficcontrol.apache.org by GitBox <gi...@apache.org> on 2022/10/12 15:33:14 UTC
[GitHub] [trafficcontrol] smalenfant opened a new issue, #7128: API acme_autorenew: Renewal are not being kicked off
smalenfant opened a new issue, #7128:
URL: https://github.com/apache/trafficcontrol/issues/7128
After upgrading to 6.1.0 from 5.1.2. Also enabling Postgresql Traffic Vault. Certificate renewal trigger via the API isn't working anymore.
Note that using "renew" fro Traffic Portal for a single Delivery Service works (Sometimes fails, different issue).
## This Bug Report affects these Traffic Control components:
- Traffic Ops
## Current behavior:
After issuing this API: `/usr/local/bin/topost -a 4.0 /acme_autorenew`
Logs are filled with the following for each certificate needed renewal:
```
getting ssl keys for xmlId: cdvr-4k and version: 1 : could not begin Traffic Vault PostgreSQL transaction: context canceled: context canceled
```
## Expected behavior:
Certificates to be renewed.
## Steps to reproduce:
See `current behavior`.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: issues-unsubscribe@trafficcontrol.apache.org.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [trafficcontrol] mitchell852 commented on issue #7128: API acme_autorenew: Renewal are not being kicked off
Posted by GitBox <gi...@apache.org>.
mitchell852 commented on issue #7128:
URL: https://github.com/apache/trafficcontrol/issues/7128#issuecomment-1284340857
> @mitchell852 It's in there already. Maybe not clear. `After upgrading to 6.1.0 from 5.1.2`
cool. guess i didn't see that. :)
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: issues-unsubscribe@trafficcontrol.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [trafficcontrol] mitchell852 commented on issue #7128: API acme_autorenew: Renewal are not being kicked off
Posted by "mitchell852 (via GitHub)" <gi...@apache.org>.
mitchell852 commented on issue #7128:
URL: https://github.com/apache/trafficcontrol/issues/7128#issuecomment-1470821756
> I don't think so. That would only impact a single delivery service at a time, only if they use this method of obtaining a cert, and only if they decide to use auto-renewal. There are a lot of ways around this and a lot of ways the problem is contained.
medium a good compromise? :)
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: issues-unsubscribe@trafficcontrol.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [trafficcontrol] smalenfant commented on issue #7128: API acme_autorenew: Renewal are not being kicked off
Posted by GitBox <gi...@apache.org>.
smalenfant commented on issue #7128:
URL: https://github.com/apache/trafficcontrol/issues/7128#issuecomment-1284356148
I also noticed that the expiration is not set when doing the riak->postgreql migration. Not sure if this could affect the functionality of the renewal.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: issues-unsubscribe@trafficcontrol.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [trafficcontrol] mitchell852 commented on issue #7128: API acme_autorenew: Renewal are not being kicked off
Posted by "mitchell852 (via GitHub)" <gi...@apache.org>.
mitchell852 commented on issue #7128:
URL: https://github.com/apache/trafficcontrol/issues/7128#issuecomment-1468556884
not being able to renew a cert seems like high impact (as opposed to low), right? @ocket8888
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: issues-unsubscribe@trafficcontrol.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [trafficcontrol] mitchell852 commented on issue #7128: API acme_autorenew: Renewal are not being kicked off
Posted by GitBox <gi...@apache.org>.
mitchell852 commented on issue #7128:
URL: https://github.com/apache/trafficcontrol/issues/7128#issuecomment-1281089710
@smalenfant - can you add to the description which version(s) of TC this bug exists in.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: issues-unsubscribe@trafficcontrol.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [trafficcontrol] ocket8888 commented on issue #7128: API acme_autorenew: Renewal are not being kicked off
Posted by "ocket8888 (via GitHub)" <gi...@apache.org>.
ocket8888 commented on issue #7128:
URL: https://github.com/apache/trafficcontrol/issues/7128#issuecomment-1470587261
I don't think so. That would only impact a single delivery service at a time, only if they use this method of obtaining a cert, and only if they decide to use auto-renewal. There are a lot of ways around this and a lot of ways the problem is contained.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: issues-unsubscribe@trafficcontrol.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [trafficcontrol] smalenfant commented on issue #7128: API acme_autorenew: Renewal are not being kicked off
Posted by GitBox <gi...@apache.org>.
smalenfant commented on issue #7128:
URL: https://github.com/apache/trafficcontrol/issues/7128#issuecomment-1276477449
I have changed the backend to Riak and autorenew is now working.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: issues-unsubscribe@trafficcontrol.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [trafficcontrol] smalenfant commented on issue #7128: API acme_autorenew: Renewal are not being kicked off
Posted by GitBox <gi...@apache.org>.
smalenfant commented on issue #7128:
URL: https://github.com/apache/trafficcontrol/issues/7128#issuecomment-1284334826
@mitchell852 It's in there already. Maybe not clear. `After upgrading to 6.1.0 from 5.1.2`
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: issues-unsubscribe@trafficcontrol.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org