Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Yorc consul service registration fails if using TLS #153

Closed
1 of 3 tasks
loicalbertin opened this issue Sep 3, 2018 · 0 comments · Fixed by #166
Closed
1 of 3 tasks

Yorc consul service registration fails if using TLS #153

loicalbertin opened this issue Sep 3, 2018 · 0 comments · Fixed by #166
Assignees
Labels
bug Something isn't working
Milestone

Comments

@loicalbertin
Copy link
Member

Issue Type

  • Bug report
  • Documentation issue report
  • Improvement request

Description

When Yorc is configured to run in TLS then the registered TCP check in Consul fails

Expected behavior

Consul service check should be OK

Actual behavior

check fails

Steps to reproduce the issue

  1. Configure Yorc to run in TLS
  2. Start Consul
  3. start yorc

In Yorc logs:

sept. 03 15:32:40 lal-yorc yorc[9135]: 2018/09/03 15:32:40 http: TLS handshake error from [::1]:54538: EOF
sept. 03 15:32:45 lal-yorc yorc[9135]: 2018/09/03 15:32:45 http: TLS handshake error from [::1]:54540: EOF
sept. 03 15:32:50 lal-yorc yorc[9135]: 2018/09/03 15:32:50 http: TLS handshake error from [::1]:54544: EOF
sept. 03 15:32:55 lal-yorc yorc[9135]: 2018/09/03 15:32:55 http: TLS handshake error from [::1]:54546: EOF
sept. 03 15:33:00 lal-yorc yorc[9135]: 2018/09/03 15:33:00 http: TLS handshake error from [::1]:54548: EOF

In Consul logs

2018/09/03 15:34:50 [ERR] http: Request PUT /v1/session/create?dc=dc1, error: Check 'service:yorc' is in critical state from=127.0.0.1:44162
2018/09/03 15:34:52 [INFO] agent: Synced check "service:yorc"

Yorc configuration file

resources_prefix: lalyorc-
http_port: "8800"
server_id: "lal-yorc"
key_file: /etc/yorc/yorc-server.key
cert_file: /etc/yorc/yorc-server.pem
ca_file: /etc/yorc/ca.pem
ssl_verify: true
consul:
  address: "127.0.0.1:8500"
ansible:
  use_openssh: true
@loicalbertin loicalbertin added this to the 3.1.0-M3 milestone Sep 3, 2018
@loicalbertin loicalbertin self-assigned this Sep 3, 2018
@loicalbertin loicalbertin added the bug Something isn't working label Sep 3, 2018
@loicalbertin loicalbertin modified the milestones: 3.1.0-M3, 3.1.0-M4 Sep 14, 2018
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug Something isn't working
Projects
None yet
Development

Successfully merging a pull request may close this issue.

2 participants