Certificat format for the SSL dashboard
Once activated the dashboard, I try to import certificates, but it fails: $ ceph dashboard set-ssl-certificate-key -i /data/ceph/conf/ceph.key Error EINVAL: Traceback (most recent call last): File "/usr/share/ceph/mgr/mgr_module.py", line 1337, in _handle_command return CLICommand.COMMANDS[cmd['prefix']].call(self, cmd, inbuf) File "/usr/share/ceph/mgr/mgr_module.py", line 389, in call return self.func(mgr, **kwargs) File "/usr/share/ceph/mgr/dashboard/module.py", line 385, in set_ssl_certificate_key self.set_store('key', inbuf.decode()) AttributeError: 'str' object has no attribute 'decode' $ ceph dashboard set-ssl-certificate -i /data/ceph/conf/ceph.crt Error EINVAL: Traceback (most recent call last): File "/usr/share/ceph/mgr/mgr_module.py", line 1337, in _handle_command return CLICommand.COMMANDS[cmd['prefix']].call(self, cmd, inbuf) File "/usr/share/ceph/mgr/mgr_module.py", line 389, in call return self.func(mgr, **kwargs) File "/usr/share/ceph/mgr/dashboard/module.py", line 372, in set_ssl_certificate self.set_store('crt', inbuf.decode()) AttributeError: 'str' object has no attribute 'decode' They are both PEM encoded files: file /data/ceph/conf/ceph.key /data/ceph/conf/ceph.crt /data/ceph/conf/ceph.key: PEM RSA private key /data/ceph/conf/ceph.crt: PEM certificate What format does this command expect ? That error happens on Centos 8.3.2011 with ceph-mgr-16.2.1-0.el8.x86_64, downloaded directly from ceph.
And worst: $ ceph config-key set mgr/restful/fa42/crt -i /data/ceph/conf/ceph.crt set mgr/restful/fa42/crt The exact same certificate is accepted by the mgr.
Le 3 mai 2021 à 23:03, Fabrice Bacchella <fabrice.bacchella@orange.fr> a écrit :
Once activated the dashboard, I try to import certificates, but it fails:
$ ceph dashboard set-ssl-certificate-key -i /data/ceph/conf/ceph.key Error EINVAL: Traceback (most recent call last): File "/usr/share/ceph/mgr/mgr_module.py", line 1337, in _handle_command return CLICommand.COMMANDS[cmd['prefix']].call(self, cmd, inbuf) File "/usr/share/ceph/mgr/mgr_module.py", line 389, in call return self.func(mgr, **kwargs) File "/usr/share/ceph/mgr/dashboard/module.py", line 385, in set_ssl_certificate_key self.set_store('key', inbuf.decode()) AttributeError: 'str' object has no attribute 'decode'
$ ceph dashboard set-ssl-certificate -i /data/ceph/conf/ceph.crt Error EINVAL: Traceback (most recent call last): File "/usr/share/ceph/mgr/mgr_module.py", line 1337, in _handle_command return CLICommand.COMMANDS[cmd['prefix']].call(self, cmd, inbuf) File "/usr/share/ceph/mgr/mgr_module.py", line 389, in call return self.func(mgr, **kwargs) File "/usr/share/ceph/mgr/dashboard/module.py", line 372, in set_ssl_certificate self.set_store('crt', inbuf.decode()) AttributeError: 'str' object has no attribute 'decode'
They are both PEM encoded files: file /data/ceph/conf/ceph.key /data/ceph/conf/ceph.crt /data/ceph/conf/ceph.key: PEM RSA private key /data/ceph/conf/ceph.crt: PEM certificate
What format does this command expect ?
That error happens on Centos 8.3.2011 with ceph-mgr-16.2.1-0.el8.x86_64, downloaded directly from ceph. _______________________________________________ ceph-users mailing list -- ceph-users@ceph.io To unsubscribe send an email to ceph-users-leave@ceph.io
Hi Fabrice, Don't worry, it has nothing to do with the internal format of those certificates. It's been a recent breakage and will be fixed in 16.2.2. In the meantime, you can find a workaround (well, you already nailed it: the CLI command that failed is just a wrapper around the "ceph config-key set" command), as well as the details and the PR here: the fix: https://tracker.ceph.com/issues/50519 Kind Regards, Ernesto On Tue, May 4, 2021 at 12:10 PM Fabrice Bacchella < fabrice.bacchella@orange.fr> wrote:
And worst:
$ ceph config-key set mgr/restful/fa42/crt -i /data/ceph/conf/ceph.crt set mgr/restful/fa42/crt
The exact same certificate is accepted by the mgr.
Le 3 mai 2021 à 23:03, Fabrice Bacchella <fabrice.bacchella@orange.fr> a écrit :
Once activated the dashboard, I try to import certificates, but it fails:
$ ceph dashboard set-ssl-certificate-key -i /data/ceph/conf/ceph.key Error EINVAL: Traceback (most recent call last): File "/usr/share/ceph/mgr/mgr_module.py", line 1337, in _handle_command return CLICommand.COMMANDS[cmd['prefix']].call(self, cmd, inbuf) File "/usr/share/ceph/mgr/mgr_module.py", line 389, in call return self.func(mgr, **kwargs) File "/usr/share/ceph/mgr/dashboard/module.py", line 385, in set_ssl_certificate_key self.set_store('key', inbuf.decode()) AttributeError: 'str' object has no attribute 'decode'
$ ceph dashboard set-ssl-certificate -i /data/ceph/conf/ceph.crt Error EINVAL: Traceback (most recent call last): File "/usr/share/ceph/mgr/mgr_module.py", line 1337, in _handle_command return CLICommand.COMMANDS[cmd['prefix']].call(self, cmd, inbuf) File "/usr/share/ceph/mgr/mgr_module.py", line 389, in call return self.func(mgr, **kwargs) File "/usr/share/ceph/mgr/dashboard/module.py", line 372, in set_ssl_certificate self.set_store('crt', inbuf.decode()) AttributeError: 'str' object has no attribute 'decode'
They are both PEM encoded files: file /data/ceph/conf/ceph.key /data/ceph/conf/ceph.crt /data/ceph/conf/ceph.key: PEM RSA private key /data/ceph/conf/ceph.crt: PEM certificate
What format does this command expect ?
That error happens on Centos 8.3.2011 with ceph-mgr-16.2.1-0.el8.x86_64, downloaded directly from ceph. _______________________________________________ ceph-users mailing list -- ceph-users@ceph.io To unsubscribe send an email to ceph-users-leave@ceph.io
_______________________________________________ ceph-users mailing list -- ceph-users@ceph.io To unsubscribe send an email to ceph-users-leave@ceph.io
Thanks, my work around was to that problem was to put an Apache in front of the dashboard.
Le 4 mai 2021 à 20:49, Ernesto Puerta <epuertat@redhat.com> a écrit :
Hi Fabrice,
Don't worry, it has nothing to do with the internal format of those certificates. It's been a recent breakage and will be fixed in 16.2.2. In the meantime, you can find a workaround (well, you already nailed it: the CLI command that failed is just a wrapper around the "ceph config-key set" command), as well as the details and the PR here: the fix: https://tracker.ceph.com/issues/50519
Kind Regards, Ernesto
On Tue, May 4, 2021 at 12:10 PM Fabrice Bacchella < fabrice.bacchella@orange.fr> wrote:
And worst:
$ ceph config-key set mgr/restful/fa42/crt -i /data/ceph/conf/ceph.crt set mgr/restful/fa42/crt
The exact same certificate is accepted by the mgr.
Le 3 mai 2021 à 23:03, Fabrice Bacchella <fabrice.bacchella@orange.fr> a écrit :
Once activated the dashboard, I try to import certificates, but it fails:
$ ceph dashboard set-ssl-certificate-key -i /data/ceph/conf/ceph.key Error EINVAL: Traceback (most recent call last): File "/usr/share/ceph/mgr/mgr_module.py", line 1337, in _handle_command return CLICommand.COMMANDS[cmd['prefix']].call(self, cmd, inbuf) File "/usr/share/ceph/mgr/mgr_module.py", line 389, in call return self.func(mgr, **kwargs) File "/usr/share/ceph/mgr/dashboard/module.py", line 385, in set_ssl_certificate_key self.set_store('key', inbuf.decode()) AttributeError: 'str' object has no attribute 'decode'
$ ceph dashboard set-ssl-certificate -i /data/ceph/conf/ceph.crt Error EINVAL: Traceback (most recent call last): File "/usr/share/ceph/mgr/mgr_module.py", line 1337, in _handle_command return CLICommand.COMMANDS[cmd['prefix']].call(self, cmd, inbuf) File "/usr/share/ceph/mgr/mgr_module.py", line 389, in call return self.func(mgr, **kwargs) File "/usr/share/ceph/mgr/dashboard/module.py", line 372, in set_ssl_certificate self.set_store('crt', inbuf.decode()) AttributeError: 'str' object has no attribute 'decode'
They are both PEM encoded files: file /data/ceph/conf/ceph.key /data/ceph/conf/ceph.crt /data/ceph/conf/ceph.key: PEM RSA private key /data/ceph/conf/ceph.crt: PEM certificate
What format does this command expect ?
That error happens on Centos 8.3.2011 with ceph-mgr-16.2.1-0.el8.x86_64, downloaded directly from ceph. _______________________________________________ ceph-users mailing list -- ceph-users@ceph.io To unsubscribe send an email to ceph-users-leave@ceph.io
_______________________________________________ ceph-users mailing list -- ceph-users@ceph.io To unsubscribe send an email to ceph-users-leave@ceph.io
_______________________________________________ ceph-users mailing list -- ceph-users@ceph.io To unsubscribe send an email to ceph-users-leave@ceph.io
participants (2)
-
Ernesto Puerta
-
Fabrice Bacchella