Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

TiFlash fails to start with empty string ssl configs #9235

Closed
JaySon-Huang opened this issue Jul 15, 2024 · 0 comments · Fixed by #9234
Closed

TiFlash fails to start with empty string ssl configs #9235

JaySon-Huang opened this issue Jul 15, 2024 · 0 comments · Fixed by #9234

Comments

@JaySon-Huang
Copy link
Contributor

JaySon-Huang commented Jul 15, 2024

Bug Report

Please answer these questions before submitting your issue. Thanks!

1. Minimal reproduce step (Required)

Start tiflash with

        [security]
          ca_path = ""
          cert_path = ""
          key_path = ""

2. What did you expect to see? (Required)

tiflash starts with tls disabled

3. What did you see instead (Required)

tiflash starts with tls enabled, but failed to create the security grpc server, then failed to start the process.


[2024/07/15 09:18:24.454 +00:00] [ERROR] [Server.cpp:392] ["/build/tics/contrib/grpc/src/core/ext/transport/chttp2/server/secure/server_secure_chttp2.cc, line number: 120, log msg : {\"created\":\"@1721035104.454831344\",\"description\":\"Unable to create secure server with credentials of type Ssl\",\"file\":\"/build/tics/contrib/grpc/src/core/ext/transport/chttp2/server/secure/server_secure_chttp2.cc\",\"file_line\":105}"] [source=grpc] [thread_id=1]
[2024/07/15 09:18:24.454 +00:00] [ERROR] [Server.cpp:392] ["/build/tics/contrib/grpc/src/core/lib/security/security_connector/ssl/ssl_security_connector.cc, line number: 233, log msg : Failed loading SSL server credentials from fetcher."] [source=grpc] [thread_id=1]
[2024/07/15 09:18:24.454 +00:00] [ERROR] [Server.cpp:392] ["/build/tics/contrib/grpc/src/core/lib/security/security_connector/ssl/ssl_security_connector.cc, line number: 381, log msg : Handshaker factory creation failed with TSI_INVALID_ARGUMENT."] [source=grpc] [thread_id=1]
[2024/07/15 09:18:24.454 +00:00] [ERROR] [Server.cpp:392] ["/build/tics/contrib/grpc/src/core/tsi/ssl_transport_security.cc, line number: 840, log msg : Invalid cert chain file."] [source=grpc] [thread_id=1]
[2024/07/15 09:18:24.454 +00:00] [INFO] [TiFlashSecurity.h:196] ["read new SslCredentialOptions: ca_path: , cert_path: , key_path: "] [thread_id=1]

4. What is your TiFlash version? (Required)

master

@ti-chi-bot ti-chi-bot bot closed this as completed in 951e010 Jul 16, 2024
ti-chi-bot bot pushed a commit that referenced this issue Jul 18, 2024
close #9235

security: allow empty `security.ca_path`/`security.cert_path`/`security.key_path`

Signed-off-by: ti-chi-bot <ti-community-prow-bot@tidb.io>

Co-authored-by: JaySon <tshent@qq.com>
Co-authored-by: JaySon-Huang <tshent@qq.com>
ti-chi-bot bot pushed a commit that referenced this issue Jul 19, 2024
close #9235

security: allow empty `security.ca_path`/`security.cert_path`/`security.key_path`

Signed-off-by: ti-chi-bot <ti-community-prow-bot@tidb.io>

Co-authored-by: JaySon <tshent@qq.com>
Co-authored-by: JaySon-Huang <tshent@qq.com>
ti-chi-bot bot pushed a commit that referenced this issue Aug 26, 2024
close #9235

security: allow empty `security.ca_path`/`security.cert_path`/`security.key_path`

Signed-off-by: ti-chi-bot <ti-community-prow-bot@tidb.io>
Signed-off-by: JaySon-Huang <tshent@qq.com>

Co-authored-by: JaySon <tshent@qq.com>
Co-authored-by: JaySon-Huang <tshent@qq.com>
JaySon-Huang added a commit to ti-chi-bot/tiflash that referenced this issue Oct 28, 2024
pingcap#9238)

close pingcap#9235

security: allow empty `security.ca_path`/`security.cert_path`/`security.key_path`

Signed-off-by: ti-chi-bot <ti-community-prow-bot@tidb.io>

Co-authored-by: JaySon <tshent@qq.com>
Co-authored-by: JaySon-Huang <tshent@qq.com>
ti-chi-bot bot pushed a commit that referenced this issue Oct 31, 2024
close #9235

security: allow empty `security.ca_path`/`security.cert_path`/`security.key_path`

Signed-off-by: ti-chi-bot <ti-community-prow-bot@tidb.io>

Co-authored-by: JaySon <tshent@qq.com>
Co-authored-by: JaySon-Huang <tshent@qq.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging a pull request may close this issue.

1 participant