Hi Fabrice,
Don't worry, it has nothing to do with the internal format of those
certificates. It's been a recent breakage and will be fixed in 16.2.2. In
the meantime, you can find a workaround (well, you already nailed it: the
CLI command that failed is just a wrapper around the "ceph config-key set"
command), as well as the details and the PR here: the fix:
Kind Regards,
Ernesto
On Tue, May 4, 2021 at 12:10 PM Fabrice Bacchella <
fabrice.bacchella(a)orange.fr> wrote:
And worst:
$ ceph config-key set mgr/restful/fa42/crt -i /data/ceph/conf/ceph.crt
set mgr/restful/fa42/crt
The exact same certificate is accepted by the mgr.
Le 3 mai 2021 à 23:03, Fabrice Bacchella
<fabrice.bacchella(a)orange.fr>
a écrit :
Once activated the dashboard, I try to import certificates, but it fails:
$ ceph dashboard set-ssl-certificate-key -i /data/ceph/conf/ceph.key
Error EINVAL: Traceback (most recent call last):
File "/usr/share/ceph/mgr/mgr_module.py", line 1337, in _handle_command
return CLICommand.COMMANDS[cmd['prefix']].call(self, cmd, inbuf)
File "/usr/share/ceph/mgr/mgr_module.py", line 389, in call
return self.func(mgr, **kwargs)
File "/usr/share/ceph/mgr/dashboard/module.py", line 385, in
set_ssl_certificate_key
self.set_store('key', inbuf.decode())
AttributeError: 'str' object has no attribute 'decode'
$ ceph dashboard set-ssl-certificate -i /data/ceph/conf/ceph.crt
Error EINVAL: Traceback (most recent call last):
File "/usr/share/ceph/mgr/mgr_module.py", line 1337, in _handle_command
return CLICommand.COMMANDS[cmd['prefix']].call(self, cmd, inbuf)
File "/usr/share/ceph/mgr/mgr_module.py", line 389, in call
return self.func(mgr, **kwargs)
File "/usr/share/ceph/mgr/dashboard/module.py", line 372, in
set_ssl_certificate
self.set_store('crt', inbuf.decode())
AttributeError: 'str' object has no attribute 'decode'
They are both PEM encoded files:
file /data/ceph/conf/ceph.key /data/ceph/conf/ceph.crt
/data/ceph/conf/ceph.key: PEM RSA private key
/data/ceph/conf/ceph.crt: PEM certificate
What format does this command expect ?
That error happens on Centos 8.3.2011 with ceph-mgr-16.2.1-0.el8.x86_64,
downloaded directly from ceph.
_______________________________________________
ceph-users mailing list -- ceph-users(a)ceph.io
To unsubscribe send an email to ceph-users-leave(a)ceph.io
_______________________________________________
ceph-users mailing list -- ceph-users(a)ceph.io
To unsubscribe send an email to ceph-users-leave(a)ceph.io