New issue
Advanced search Search tips
Note: Color blocks (like █ or █) mean that a user may not be available. Tooltip shows the reason.

Issue 825072 link

Starred by 1 user
Status: Fixed
Owner:
█ jkop@chromium.org
Last visit > 30 days ago
Closed: Apr 2018
Cc:
█ jkop@chromium.org
ayatane@chromium.org
nya@chromium.org
Components:
EstimatedDays: ----
NextAction: ----
OS: ----
Pri: 1
Type: Bug



Sign in to add a comment

ci_results_archiver: SSL error: Unable to get certificate

Project Member Reported by nya@chromium.org, Mar 23 2018 
ci_results_archiver is failing to archive CIDB tables due to following error:

SSL error: Unable to get certificate from '/creds/ci_results_archiver/cidb/client-cert.pem'

Looks caused by:
https://chrome-internal-review.googlesource.com/c/chromeos/chromeos-admin/+/592123

Comment 1 by nya@chromium.org, Mar 23 2018

Owner: jkop@chromium.org
Status: Assigned (was: Started)
$ openssl x509 -in /creds/ci_results_archiver/cidb/client-cert.pem -noout -text
unable to load certificate
140632955229856:error:0906D066:PEM routines:PEM_read_bio:bad end line:pem_lib.c:802:

Actually the certificate seems to have whitespaces in beginning of lines. See the real file on chromeos-server156.

Comment 2 by jkop@chromium.org, Mar 23 2018 

Reverted; puppet will deploy within 4 hours.

Comment 3 by jkop@chromium.org, Mar 23 2018 

I'd misunderstood how secrets were being encrypted, didn't anticipate it would be sensitive to whitespace. Obvious in retrospect. Fix without that problem will be deployed, possibly at the same time as the revert.
Project Member

Comment 4 by bugdroid1@chromium.org, Mar 27 2018 

The following revision refers to this bug:
  https://chrome-internal.googlesource.com/chromeos/chromeos-admin/+/43f96aff2134ac2fa9a3304074e40557b897ffc6

commit 43f96aff2134ac2fa9a3304074e40557b897ffc6
Author: Jacob Kopczynski <jkop@google.com>
Date: Tue Mar 27 17:59:21 2018

Comment 5 by jkop@chromium.org, Apr 26 2018

Status: Fixed (was: Assigned)
►

Sign in to add a comment