Uploaded image for project: 'Couchbase C client library libcouchbase'
  1. Couchbase C client library libcouchbase
  2. CCBC-1521

Bucket-less bootstrap times out when client certificate authentication is being used

    XMLWordPrintable

Details

    • Bug
    • Status: Resolved
    • Critical
    • Resolution: Fixed
    • None
    • 3.2.5
    • library
    • 1

    Description

      Using the same certs I was able to connect using gocb and connect to the rest apis using the python requests library

      lcb_INSTANCE *instance;
      lcb_CREATEOPTS *createopts;
      std::string connstr = "couchbases://172.23.111.135?truststorepath=/Users/jakerawsthorne/Code/cbsdk/cbdyncluster/ca.pem&ssl=on&certpath=/Users/jakerawsthorne/Code/cbsdk/cbdyncluster/client.pem&keypath=/Users/jakerawsthorne/Code/cbsdk/cbdyncluster/client.key";
      lcb_createopts_create(&createopts, LCB_TYPE_CLUSTER);
      lcb_createopts_connstr(createopts, connstr.c_str(), connstr.size());
      ASSERT_STATUS_EQ(LCB_SUCCESS, lcb_create(&instance, createopts));
      ASSERT_STATUS_EQ(LCB_SUCCESS, lcb_connect(instance));
      ASSERT_STATUS_EQ(LCB_SUCCESS, lcb_wait(instance, LCB_WAIT_DEFAULT));
      lcb_createopts_destroy(createopts);
      lcb_destroy(instance);
      

      0ms [I19f1a190caf88188] {95063/307} [INFO] (instance - L:521) Version=3.2.2, Changeset=fadbd4d1617df952457abfa9984d095015f1ca52
      0ms [I19f1a190caf88188] {95063/307} [INFO] (instance - L:522) Effective connection string: couchbases://172.23.111.135?console_log_level=5&truststorepath=/Users/jakerawsthorne/Code/cbsdk/cbdyncluster/ca.pem&ssl=on&certpath=/Users/jakerawsthorne/Code/cbsdk/cbdyncluster/client.pem&keypath=/Users/jakerawsthorne/Code/cbsdk/cbdyncluster/client.key. Bucket=(null)
      2ms [I19f1a190caf88188] {95063/307} [DEBUG] (SSL - L:356) Load verify locations from "/Users/jakerawsthorne/Code/cbsdk/cbdyncluster/ca.pem"
      3ms [I19f1a190caf88188] {95063/307} [DEBUG] (SSL - L:362) Authenticate with key "/Users/jakerawsthorne/Code/cbsdk/cbdyncluster/client.key", cert "/Users/jakerawsthorne/Code/cbsdk/cbdyncluster/client.pem"
      908ms [I19f1a190caf88188] {95063/307} [INFO] (instance - L:212) DNS SRV lookup failed: LCB_ERR_UNKNOWN_HOST (1049). Ignore this if not relying on DNS SRV records
      908ms [I19f1a190caf88188] {95063/307} [DEBUG] (instance - L:155) Adding host 172.23.111.135:18091 to initial HTTP bootstrap list
      908ms [I19f1a190caf88188] {95063/307} [DEBUG] (instance - L:155) Adding host 172.23.111.135:11207 to initial CCCP bootstrap list
      908ms [I19f1a190caf88188] {95063/307} [TRACE] (instance - L:193) Bootstrap hosts loaded (cccp:1, http:1)
      908ms [I19f1a190caf88188] {95063/307} [INFO] (bootstrap - L:277) Requested network configuration: heuristic
      908ms [I19f1a190caf88188] {95063/307} [DEBUG] (confmon - L:94) Preparing providers (this may be called multiple times)
      908ms [I19f1a190caf88188] {95063/307} [DEBUG] (confmon - L:100) Provider CCCP is ENABLED
      908ms [I19f1a190caf88188] {95063/307} [DEBUG] (confmon - L:100) Provider HTTP is ENABLED
      908ms [I19f1a190caf88188] {95063/307} [TRACE] (confmon - L:319) Refreshing current cluster map (bucket: (null))
      908ms [I19f1a190caf88188] {95063/307} [INFO] (cccp - L:176) Requesting connection to node 172.23.111.135:11207 for CCCP configuration
      908ms [I19f1a190caf88188] {95063/307} [DEBUG] (lcbio_mgr - L:501) <172.23.111.135:11207> (HE=0x7fc5af0090f0) Creating new connection because none are available in the pool
      908ms [I19f1a190caf88188] {95063/307} [TRACE] (lcbio_mgr - L:413) <172.23.111.135:11207> (HE=0x7fc5af0090f0) New pool entry: I=0x7fc5af0099e0
      908ms [I19f1a190caf88188] {95063/307} [INFO] (connection - L:497) <172.23.111.135:11207> (SOCK=7aabc0edef3b9791) Starting. Timeout=2000000us
      908ms [I19f1a190caf88188] {95063/307} [DEBUG] (connection - L:262) <172.23.111.135:11207> (SOCK=7aabc0edef3b9791) Created new socket with FD=11
      908ms [I19f1a190caf88188] {95063/307} [TRACE] (connection - L:362) <172.23.111.135:11207> (SOCK=7aabc0edef3b9791) Scheduling I/O watcher for asynchronous connection completion.
      908ms [I19f1a190caf88188] {95063/307} [TRACE] (confmon - L:305) Attempting to retrieve cluster map via CCCP
      1061ms [I19f1a190caf88188] {95063/307} [INFO] (connection - L:159) <172.23.111.135:11207> (SOCK=7aabc0edef3b9791) Connected established
      1061ms [I19f1a190caf88188] {95063/307} [DEBUG] (connection - L:106) <172.23.111.135:11207> (SOCK=7aabc0edef3b9791) Successfully set TCP_NODELAY
      1061ms [I19f1a190caf88188] {95063/307} [DEBUG] (connection - L:106) <172.23.111.135:11207> (SOCK=7aabc0edef3b9791) Successfully set TCP_KEEPALIVE
      1061ms [I19f1a190caf88188] {95063/307} [DEBUG] (lcbio_mgr - L:369) <172.23.111.135:11207> (HE=0x7fc5af0090f0) Received result for I=0x7fc5af0099e0,C=0x0; E=0x0
      1061ms [I19f1a190caf88188] {95063/307} [DEBUG] (lcbio_mgr - L:329) <172.23.111.135:11207> (HE=0x7fc5af0090f0) Assigning R=0x7fc5af0098e0 SOCKET=0x7fc5af009c20
      1061ms [I19f1a190caf88188] {95063/307} [DEBUG] (ioctx - L:94) <172.23.111.135:11207> (CTX=0x7fc5ad706c80,unknown) Pairing with SOCK=7aabc0edef3b9791
      1062ms [I19f1a190caf88188] {95063/307} [DEBUG] (negotiation - L:469) <172.23.111.135:11207> (CTX=0x7fc5ad706c80,sasl,SASLREQ=0x7fc5ae808200) HELO identificator: {"a":"libcouchbase/3.2.2 (Darwin-19.6.0; x86_64; AppleClang 12.0.0.12000032)","i":"19f1a190caf88188/7aabc0edef3b9791"}, features: 0x02 (TLS), 0x06 (XATTR), 0x0b (JSON), 0x08 (Select bucket), 0x07 (XERROR), 0x03 (TCP nodelay), 0x0a (Snappy), 0x04 (Mutation seqno), 0x0f (Tracing), 0x12 (Collections), 0x0e (Unordered execution), 0x17 (Create as Deleted), 0x14 (Preserve Expiry)
      1062ms [I19f1a190caf88188] {95063/307} [TRACE] (SSL - L:242) sock=0x7fc5af009c20: ST(0x10). before SSL initialization. R(0x1)U
      1225ms [I19f1a190caf88188] {95063/307} [TRACE] (SSL - L:242) sock=0x7fc5af009c20: ST(0x20). SSL negotiation finished successfully. R(0x1)U
      1225ms [I19f1a190caf88188] {95063/307} [DEBUG] (SSL - L:246) sock=0x7fc5af009c20. Using SSL version TLSv1.3. Cipher=TLS_AES_256_GCM_SHA384
      1382ms [I19f1a190caf88188] {95063/307} [DEBUG] (negotiation - L:500) <172.23.111.135:11207> (CTX=0x7fc5ad706c80,sasl,SASLREQ=0x7fc5ae808200) Server supports features: 0x03 (TCP nodelay), 0x04 (Mutation seqno), 0x06 (XATTR), 0x07 (XERROR), 0x08 (Select bucket), 0x0a (Snappy), 0x0b (JSON), 0x0e (Unordered execution), 0x0f (Tracing), 0x12 (Collections), 0x14 (Preserve Expiry), 0x17 (Create as Deleted)
      1382ms [I19f1a190caf88188] {95063/307} [DEBUG] (ioctx - L:139) <172.23.111.135:11207> (CTX=0x7fc5ad706c80,sasl) Destroying context. Pending Writes=0, Entered=true, Socket Refcount=1
      1382ms [I19f1a190caf88188] {95063/307} [DEBUG] (ioctx - L:94) <172.23.111.135:11207> (CTX=0x7fc5ad419e90,unknown) Pairing with SOCK=7aabc0edef3b9791
      3386ms [I19f1a190caf88188] {95063/307} [ERROR] (cccp - L:187) <172.23.111.135:11207> (CTX=0x7fc5ad419e90,bc_cccp) Could not get configuration: LCB_ERR_TIMEOUT (201)
      3386ms [I19f1a190caf88188] {95063/307} [DEBUG] (ioctx - L:139) <172.23.111.135:11207> (CTX=0x7fc5ad419e90,bc_cccp) Destroying context. Pending Writes=0, Entered=false, Socket Refcount=1
      3386ms [I19f1a190caf88188] {95063/307} [INFO] (confmon - L:216) Provider 'CCCP' failed: LCB_ERR_TIMEOUT (201)
      3386ms [I19f1a190caf88188] {95063/307} [DEBUG] (confmon - L:260) Will try next provider in 0us
      3386ms [I19f1a190caf88188] {95063/307} [TRACE] (confmon - L:305) Attempting to retrieve cluster map via HTTP
      3386ms [I19f1a190caf88188] {95063/307} [TRACE] (htconfig - L:359) Starting HTTP Configuration Provider 0x7fc5ad506700
      3386ms [I19f1a190caf88188] {95063/307} [INFO] (connection - L:497) <172.23.111.135:18091> (SOCK=5b79083f31e71754) Starting. Timeout=2000000us
      3386ms [I19f1a190caf88188] {95063/307} [DEBUG] (connection - L:262) <172.23.111.135:18091> (SOCK=5b79083f31e71754) Created new socket with FD=11
      3386ms [I19f1a190caf88188] {95063/307} [TRACE] (connection - L:362) <172.23.111.135:18091> (SOCK=5b79083f31e71754) Scheduling I/O watcher for asynchronous connection completion.
      3537ms [I19f1a190caf88188] {95063/307} [INFO] (connection - L:159) <172.23.111.135:18091> (SOCK=5b79083f31e71754) Connected established
      3537ms [I19f1a190caf88188] {95063/307} [DEBUG] (connection - L:106) <172.23.111.135:18091> (SOCK=5b79083f31e71754) Successfully set TCP_NODELAY
      3537ms [I19f1a190caf88188] {95063/307} [DEBUG] (connection - L:106) <172.23.111.135:18091> (SOCK=5b79083f31e71754) Successfully set TCP_KEEPALIVE
      3537ms [I19f1a190caf88188] {95063/307} [DEBUG] (htconfig - L:315) Successfuly connected to REST API 172.23.111.135:18091
      3537ms [I19f1a190caf88188] {95063/307} [DEBUG] (ioctx - L:94) <172.23.111.135:18091> (CTX=0x7fc5ad706ce0,unknown) Pairing with SOCK=5b79083f31e71754
      3537ms [I19f1a190caf88188] {95063/307} [TRACE] (SSL - L:242) sock=0x7fc5af009d00: ST(0x10). before SSL initialization. R(0x1)U
      3883ms [I19f1a190caf88188] {95063/307} [TRACE] (SSL - L:242) sock=0x7fc5af009d00: ST(0x20). SSL negotiation finished successfully. R(0x1)U
      3883ms [I19f1a190caf88188] {95063/307} [DEBUG] (SSL - L:246) sock=0x7fc5af009d00. Using SSL version TLSv1.2. Cipher=DHE-RSA-AES256-SHA
      4045ms [I19f1a190caf88188] {95063/307} [TRACE] (htconfig - L:214) <172.23.111.135:18091> (CTX=0x7fc5ad706ce0,bc_http) Received 395 bytes on HTTP stream
      4071ms [I19f1a190caf88188] {95063/307} [TRACE] (htconfig - L:214) <172.23.111.135:18091> (CTX=0x7fc5ad706ce0,bc_http) Received 7536 bytes on HTTP stream
      5909ms [I19f1a190caf88188] {95063/307} [ERROR] (bootstrap - L:205) Failed to bootstrap client=0x7fc5ad505c60. Error=LCB_ERR_TIMEOUT (201) (Last=LCB_ERR_TIMEOUT (201)), Message="Failed to bootstrap in time"
      

       

      Attachments

        No reviews matched the request. Check your Options in the drop-down menu of this sections header.

        Activity

          Using 7.1.0-1695

          [nix-shell:~/Code/cbsdk/libcouchbase]$ openssl s_client -key client.key -cert client.pem -CAfile ca.pem 172.23.111.144:11207
          CONNECTED(00000003)
          Can't use SSL_get_servername
          depth=1 CN = Couchbase Root CA
          verify return:1
          depth=0 CN = Couchbase Server
          verify return:1
          ---
          Certificate chain
           0 s:CN = Couchbase Server
             i:CN = Couchbase Root CA
           1 s:CN = Couchbase Root CA
             i:CN = Couchbase Root CA
          ---
          Server certificate
          -----BEGIN CERTIFICATE-----
          MIIDKTCCAhGgAwIBAgIQQAriieIIXsaNHFhqhvD1uTANBgkqhkiG9w0BAQsFADAc
          MRowGAYDVQQDExFDb3VjaGJhc2UgUm9vdCBDQTAeFw0yMTExMTkxMTMyMTRaFw0y
          MjExMTkxMTMyMTRaMBsxGTAXBgNVBAMTEENvdWNoYmFzZSBTZXJ2ZXIwggEiMA0G
          CSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOpF6By5sgf5P1fZcKWKC1QTQV/6OS
          LIxL+d4aXs+QJPL9Cf1JB+lEP+pfVbsy3bT6xWeyPilUWehCKeRKLSnHBzpM1LHM
          paD8uNAGhjW4kDxAhfR/MUYETycKsDRWHdKIzJaFukFJbz0HrUgOHkagxO/ZZ+AZ
          scdbutKhOpX0WT4MrI2abpKfUTBT4XTbyiGPrct5Km1k56tkvvFUj4xsITUPDwSu
          gN8jwlIZifQReXtFTLpJGWxWLae0F0kn5B3wDbaOHMG6J1XPV7r4DKYc6saXy4j0
          tQEcElgNT/GnR70nURbcGBcUcfsQ9qz1gvX9DUaGd1T6kK2GGFgu8E99AgMBAAGj
          aDBmMA4GA1UdDwEB/wQEAwIFoDATBgNVHSUEDDAKBggrBgEFBQcDATANBgNVHQ4E
          BgQEaGFzaDAfBgNVHSMEGDAWgBSwusCNM/N+qUXYR6cEB4iKPF8F1jAPBgNVHREE
          CDAGhwSsF2+QMA0GCSqGSIb3DQEBCwUAA4IBAQCiZmylFfUkzP5wje1EvoxHNW/K
          NvbCyZBYoVXdO4R7zXYJHE+DIYihpkRH+s/KoFSNoLjgS295pMwxZfDnPAjDMHvM
          qbwLIyBzNfu2xL1NS6i1X5FbFoFZssQigwxwaXmssuR3c6YpQiiQ4ppPq6IaljQT
          NsYkhMY9QAIc4YEvFqY9cpZIQPBz0mKCZiWwsfhnjRN7SrSuTLX9wkJgA5TG8wjw
          lt+ORcJO5frxB6KpaljNEs+jYbaWhxzbOK7mHTtkwxGsP/w/UvSdX/1Mh1V1Zs6s
          JAgCECV2cPSKpwxBxIEQk1NW9sDAnno0L8FRNzUram+xIMxrcBMz1Pb9i4bQ
          -----END CERTIFICATE-----
          subject=CN = Couchbase Server
           
          issuer=CN = Couchbase Root CA
           
          ---
          Acceptable client certificate CA names
          CN = Couchbase Server
          Requested Signature Algorithms: ECDSA+SHA256:ECDSA+SHA384:ECDSA+SHA512:Ed25519:Ed448:RSA-PSS+SHA256:RSA-PSS+SHA384:RSA-PSS+SHA512:RSA-PSS+SHA256:RSA-PSS+SHA384:RSA-PSS+SHA512:RSA+SHA256:RSA+SHA384:RSA+SHA512:ECDSA+SHA224:ECDSA+SHA1:RSA+SHA224:RSA+SHA1
          Shared Requested Signature Algorithms: ECDSA+SHA256:ECDSA+SHA384:ECDSA+SHA512:Ed25519:Ed448:RSA-PSS+SHA256:RSA-PSS+SHA384:RSA-PSS+SHA512:RSA-PSS+SHA256:RSA-PSS+SHA384:RSA-PSS+SHA512:RSA+SHA256:RSA+SHA384:RSA+SHA512
          Peer signing digest: SHA256
          Peer signature type: RSA-PSS
          Server Temp Key: X25519, 253 bits
          ---
          SSL handshake has read 2259 bytes and written 2309 bytes
          Verification: OK
          ---
          New, TLSv1.3, Cipher is TLS_AES_256_GCM_SHA384
          Server public key is 2048 bit
          Secure Renegotiation IS NOT supported
          Compression: NONE
          Expansion: NONE
          No ALPN negotiated
          Early data was not sent
          Verify return code: 0 (ok)
          ---
          ---
          Post-Handshake New Session Ticket arrived:
          SSL-Session:
              Protocol  : TLSv1.3
              Cipher    : TLS_AES_256_GCM_SHA384
              Session-ID: 2D1AB038A60E7F026CC3DCA5CC09F34E38C8A4B1B9354123FC60A912C96073C0
              Session-ID-ctx: 
              Resumption PSK: 19DAB783ABA7C8C5BFE62F2069B02C0E673A3CB84CC71481ABB47BA0635216B7C8AAE8C83C3C7D5744FAF711EFD93680
              PSK identity: None
              PSK identity hint: None
              SRP username: None
              TLS session ticket lifetime hint: 7200 (seconds)
              TLS session ticket:
              0000 - c5 e5 52 77 77 c6 66 24-ca 4c b3 92 03 0c 27 6d   ..Rww.f$.L....'m
              0010 - 43 39 7a e2 f3 61 37 d3-db 66 34 96 75 d8 7c 78   C9z..a7..f4.u.|x
              0020 - 7a 8d e0 96 51 59 d0 d2-81 2b c4 97 a5 38 80 23   z...QY...+...8.#
              0030 - 08 a6 ef 30 45 61 a6 72-29 1b b1 1e 79 e4 a3 f3   ...0Ea.r)...y...
              0040 - 60 bd f1 11 e7 3a 5c 61-c0 7c 46 a7 7a 1a 3e 7b   `....:\a.|F.z.>{
              0050 - 8c 84 32 d6 37 3a 2f cf-a6 ab 4b 83 a8 eb b9 da   ..2.7:/...K.....
              0060 - 59 9e 3e e1 dc a8 62 4b-54 95 ac 8f f0 63 50 46   Y.>...bKT....cPF
              0070 - 1e 2c 33 48 e8 42 1c 38-af bf e5 7b b6 24 f1 22   .,3H.B.8...{.$."
              0080 - d2 00 84 86 fb 4b f5 3f-29 f3 87 42 95 c7 1d 6e   .....K.?)..B...n
              0090 - 89 28 42 8e a0 5d 0f 12-97 9c 75 21 1b 38 83 d9   .(B..]....u!.8..
              00a0 - b7 a9 d0 6e ee a2 47 44-6d a9 68 e0 9c 51 60 f5   ...n..GDm.h..Q`.
              00b0 - bd a1 f9 c6 4a 8c bb 53-c0 37 3a cf e3 64 31 ba   ....J..S.7:..d1.
              00c0 - cf bf 4b f8 d0 ac 36 fc-57 ea ac 90 f9 c6 b4 98   ..K...6.W.......
              00d0 - 57 22 f8 f4 9e 84 57 d9-14 7b 65 a9 9e 1a aa b5   W"....W..{e.....
              00e0 - e4 ef f7 a6 41 b6 54 34-18 09 44 05 42 79 d9 d6   ....A.T4..D.By..
              00f0 - b8 ee 2c 74 f5 ad 65 0f-9b 84 09 57 d4 cf d3 56   ..,t..e....W...V
              0100 - 04 64 85 4c a5 4d 68 a6-38 96 6d fb e8 4b d6 ec   .d.L.Mh.8.m..K..
              0110 - d5 31 a1 b6 d1 7e fc 00-aa f4 d6 cc af 16 1e 5a   .1...~.........Z
              0120 - bd 66 16 bb 10 c2 06 a1-9a cd 35 30 cc d6 db 4a   .f........50...J
              0130 - 82 45 ab fa 8d 7a bf b7-3d 3a da 30 e9 a5 12 e4   .E...z..=:.0....
              0140 - f1 e2 ff 64 7f 92 77 15-e4 0d fb 47 fd 96 85 7b   ...d..w....G...{
              0150 - 97 c6 f5 fe 57 ca 44 78-dd 49 6b af 6b e9 05 eb   ....W.Dx.Ik.k...
              0160 - 05 01 c3 49 f8 62 49 b9-60 2e 40 d0 9b 58 f9 11   ...I.bI.`.@..X..
              0170 - 59 3a df 03 f7 f2 a6 88-16 e3 32 59 25 c0 da aa   Y:........2Y%...
              0180 - ad e2 e7 09 06 76 2d 93-c3 02 89 df f3 b9 d2 f2   .....v-.........
              0190 - f0 04 46 ef c8 99 94 86-03 46 3e dd 4b d6 27 16   ..F......F>.K.'.
              01a0 - 2f 86 9d 0b 6f e1 9f 3c-67 27 d7 9a 35 86 4b 66   /...o..<g'..5.Kf
              01b0 - 83 7c f4 08 c5 43 fb cd-4e 16 77 7e 64 d8 bd 9a   .|...C..N.w~d...
              01c0 - f2 84 e3 bd dc a5 5d bb-5c 5a e7 0d 0a ee da 4a   ......].\Z.....J
              01d0 - 53 fd 20 c2 6a 64 12 0c-3a db 01 72 c3 ee 74 42   S. .jd..:..r..tB
              01e0 - 04 0f 38 4a b4 39 02 90-a0 8a 55 c7 21 0f 4e 82   ..8J.9....U.!.N.
              01f0 - 46 86 1e 02 59 e5 4a 34-46 e1 ce b8 ea 1a f3 23   F...Y.J4F......#
              0200 - a2 9e 0b c1 a3 ac 1b 63-bd 57 c7 b7 09 1e 9d 80   .......c.W......
              0210 - ad cb 3d 7e 9e e6 fa e2-d3 84 17 9e 54 1b 24 fd   ..=~........T.$.
              0220 - f0 25 9d 46 c3 18 32 bf-4a 89 b8 0e b8 44 5a 09   .%.F..2.J....DZ.
              0230 - ff 61 e5 4c 76 8e fd 49-96 f9 f1 37 33 fd f1 29   .a.Lv..I...73..)
              0240 - fa 3d 23 97 5d e7 51 d3-13 96 a5 f7 5e 97 07 70   .=#.].Q.....^..p
              0250 - 03 43 9d a6 43 93 38 c8-1c 0b ef 98 ae 96 44 fa   .C..C.8.......D.
              0260 - e2 19 23 39 d3 31 f2 15-02 23 5f e6 c2 fe b2 83   ..#9.1...#_.....
              0270 - fa de 62 a4 0c bb 3b 46-2f 1a 5b eb 5f 70 04 d6   ..b...;F/.[._p..
              0280 - cf 15 61 c8 0a f1 7f e5-ec e1 7b 65 3a ef 2d 84   ..a.......{e:.-.
              0290 - e1 3c e1 3d 67 7f 11 72-a8 5d 46 52 a1 41 1f 87   .<.=g..r.]FR.A..
              02a0 - a5 be 43 8d fb 72 e1 fe-3b 18 9b cb 96 b2 dc 09   ..C..r..;.......
              02b0 - 65 24 88 3e 40 7f dd ce-4a 03 95 2f 70 96 aa da   e$.>@...J../p...
              02c0 - 63 7d 5b 98 b6 e7 6b 4d-d5 2e 1e fb 2e 1d 5c f8   c}[...kM......\.
              02d0 - 3c 84 aa 66 39 2c c7 e1-a0 b4 6e 39 90 90 ab ee   <..f9,....n9....
              02e0 - f4 7d 84 44 f8 cc 6b b6-14 79 00 3c 9c ce ea 1d   .}.D..k..y.<....
              02f0 - 2f 3b 51 da 04 29 24 99-89 a4 6a 1a 05 22 03 da   /;Q..)$...j.."..
              0300 - 69 a8 9c 81 cd bc fa b8-bd 17 b7 33 13 77 b5 dc   i..........3.w..
              0310 - 43 51 60 58 27 f3 40 b2-94 36 2e 30 5f b1 96 97   CQ`X'.@..6.0_...
              0320 - cf 04 26 aa d4 a8 16 ec-28 99 68 57 6d 4f fb 05   ..&.....(.hWmO..
              0330 - a9 28 0d 5a d2 26 cc 87-24 a9 5a df 6d 3f df 67   .(.Z.&..$.Z.m?.g
              0340 - 65 99 87 07 e3 d6 6b 3c-bb aa 77 d9 83 ef d3 ab   e.....k<..w.....
              0350 - bf 67 de d2 e4 d5 cb 9a-0a fd 63 3b 16 d7 5b 4c   .g........c;..[L
              0360 - 7d 07 a9 f6 9f b9 f8 66-4d a4 d9 39 25 73 cf 40   }......fM..9%s.@
              0370 - 04 77 0a f8 b3 12 3a 67-d7 c1 39 56 22 f6 aa 9e   .w....:g..9V"...
              0380 - 44 91 c1 aa 08 63 c3 36-8e f5 73 78 5f 41 96 e1   D....c.6..sx_A..
              0390 - a5 bc a9 31 14 17 3f d3-d3 44 f0 8f a6 71 f3 8b   ...1..?..D...q..
              03a0 - c9 3b b5 2c 95 fd 40 30-a4 67 2e bf 2c f0 62 e0   .;.,..@0.g..,.b.
              03b0 - 01 14 18 20 56 06 47 91-4c 36 33 d5 04 fb d9 ce   ... V.G.L63.....
              03c0 - 46 13 2b 88 fe 64 f2 5a-1c 43 c5 8d 6b ee e7 e8   F.+..d.Z.C..k...
              03d0 - 08 39 ec 87 25 1f 1e 9a-99 d8 9d 4a d3 5d 31 67   .9..%......J.]1g
              03e0 - 44 12 9c 25 fe 4c 6f c2-f4 2a d9 f7 3e ab 2e c0   D..%.Lo..*..>...
              03f0 - 44 52 b2 7a b1 2c a2 1b-6a d4 d5 46 0c 34 4b 58   DR.z.,..j..F.4KX
              0400 - b9 fc 74 32 1d 92 27 e1-94 78 2c a4 d3 39 22 b9   ..t2..'..x,..9".
           
              Start Time: 1637322082
              Timeout   : 7200 (sec)
              Verify return code: 0 (ok)
              Extended master secret: no
              Max Early Data: 0
          ---
          read R BLOCK
          ---
          Post-Handshake New Session Ticket arrived:
          SSL-Session:
              Protocol  : TLSv1.3
              Cipher    : TLS_AES_256_GCM_SHA384
              Session-ID: 9CDA8F9CB3E175D330ED187313048014DFC366408D3E879932CBA3E1907D51A6
              Session-ID-ctx: 
              Resumption PSK: 7CB306F5E5FB7ACDF9C16DC0D32D1069ACE011AB640FAD77D977F79107F03F87910E151CD15C7FD6AE7E06B179935ED8
              PSK identity: None
              PSK identity hint: None
              SRP username: None
              TLS session ticket lifetime hint: 7200 (seconds)
              TLS session ticket:
              0000 - c5 e5 52 77 77 c6 66 24-ca 4c b3 92 03 0c 27 6d   ..Rww.f$.L....'m
              0010 - b8 55 76 99 30 96 67 c5-56 dd bc 31 5a c1 f4 4d   .Uv.0.g.V..1Z..M
              0020 - 27 96 93 70 52 d2 c3 d8-28 ae 4e df 2d 3b 6c d5   '..pR...(.N.-;l.
              0030 - e8 7d ed 4e b7 98 33 a5-25 07 16 08 5b 7d 5d 6d   .}.N..3.%...[}]m
              0040 - 82 ee e9 12 5c c5 93 1e-47 2e 0e bb c8 7e 28 d2   ....\...G....~(.
              0050 - cf 6d 81 22 ca 9e db fc-51 db 81 ba c6 7e 1e cb   .m."....Q....~..
              0060 - 25 3f 00 3f 8c 2a 1b 0f-0c 29 0a f6 fd 0a 47 79   %?.?.*...)....Gy
              0070 - a1 ce f8 d7 32 98 f8 f1-34 4e fa 6e e8 0b 26 81   ....2...4N.n..&.
              0080 - ae 59 8c 7d 6c dc b4 45-18 a1 48 1b fe 90 e8 15   .Y.}l..E..H.....
              0090 - 81 a1 92 89 08 b5 ec 04-ba fa e6 ee e0 5c f1 e6   .............\..
              00a0 - d8 61 64 a6 94 41 21 f6-42 2c 2d 76 e3 13 6e b3   .ad..A!.B,-v..n.
              00b0 - 69 7d f7 e1 36 89 a7 2f-12 e7 d6 79 91 65 72 44   i}..6../...y.erD
              00c0 - bb 5d 5c 4e 92 68 7d 18-e8 2b 6b ea 65 5b f6 d4   .]\N.h}..+k.e[..
              00d0 - 99 d4 b6 a4 2d 0a b0 13-d3 de 13 0c c1 28 b5 1d   ....-........(..
              00e0 - c5 40 4c 15 7f 9c 9f 48-ef dc 9d c6 4b 7e 73 52   .@L....H....K~sR
              00f0 - d3 41 cb 20 ef 3a 0e 54-a0 f1 a8 75 26 a0 d0 a7   .A. .:.T...u&...
              0100 - 65 03 8b d6 ce f1 1d ec-d4 6d d2 ad 60 ef e9 8c   e........m..`...
              0110 - 03 7e ba be 79 62 33 1e-f1 10 a2 fa 90 c1 f4 5e   .~..yb3........^
              0120 - 7f 74 72 0d fd de b9 ea-cf 4d 8e ef b0 b9 98 b2   .tr......M......
              0130 - 77 09 73 78 33 b1 aa 53-a7 83 56 55 79 9e db 50   w.sx3..S..VUy..P
              0140 - a4 34 8a 1a be a7 c6 4b-a3 c1 ac 47 34 11 b8 a8   .4.....K...G4...
              0150 - e9 79 4a d5 3c 71 af ee-6a 81 55 60 4f 9d 0f 8b   .yJ.<q..j.U`O...
              0160 - 3f f0 62 a2 d9 26 20 fb-93 9f 56 5d bc b9 1f 68   ?.b..& ...V]...h
              0170 - 20 f1 d6 04 f7 d5 42 1f-30 74 eb ed 20 d2 2b 8d    .....B.0t.. .+.
              0180 - 32 68 42 d9 94 c7 97 cb-6f 27 9a 12 9a 10 99 d9   2hB.....o'......
              0190 - e6 95 b5 e4 5e 8c b0 97-b1 4a 26 4c 9f cb 26 95   ....^....J&L..&.
              01a0 - f8 5f 42 04 9b e8 f0 44-d0 06 e6 a4 b7 b7 8c fc   ._B....D........
              01b0 - a8 ce 63 7c 83 48 d2 ce-cc 57 0b 52 ff a9 64 db   ..c|.H...W.R..d.
              01c0 - e7 e5 f7 da bc d5 a6 0f-df e0 6d ab 07 15 83 0f   ..........m.....
              01d0 - db 6e 8c 40 71 0d 48 81-c3 25 d7 22 0a ad 30 c5   .n.@q.H..%."..0.
              01e0 - 12 31 5d 23 81 0d 19 71-dd 83 32 57 a9 bc c1 f9   .1]#...q..2W....
              01f0 - c0 25 1f 31 c3 b4 de 21-fe 80 e5 24 a4 4d 5e 8c   .%.1...!...$.M^.
              0200 - 6c 7e 21 8e 97 7a 5e a4-2a 74 3a 5f 5f bb 03 7a   l~!..z^.*t:__..z
              0210 - 3d 11 85 62 d3 71 62 32-d8 18 3f a6 d3 c3 dd ad   =..b.qb2..?.....
              0220 - fd 69 38 4b f7 9a 49 9c-af 78 d0 8d c2 90 39 43   .i8K..I..x....9C
              0230 - 09 0d c5 24 4a 03 57 36-84 a9 2e 5d d3 58 e1 9d   ...$J.W6...].X..
              0240 - e1 b9 b4 e5 58 a5 ed 87-2d 7b 0c 5f e7 0d 16 8c   ....X...-{._....
              0250 - ef 2d 70 35 85 05 da ba-3e 3b 04 8a 29 f1 f1 99   .-p5....>;..)...
              0260 - ca 96 ba 85 63 1d 47 66-28 87 90 4d 48 28 c1 1b   ....c.Gf(..MH(..
              0270 - ef be 37 9e a2 d0 8c 75-6c 7c f4 d4 24 1b ba 61   ..7....ul|..$..a
              0280 - 43 7d 21 d6 ce 47 d6 6c-3b af 4b b6 0d 68 64 c5   C}!..G.l;.K..hd.
              0290 - 55 10 f6 49 f6 26 9f 90-85 c3 e9 93 33 7f 8b ee   U..I.&......3...
              02a0 - 2f 3b 3c 89 f3 94 86 ea-d6 88 0c cc 57 21 68 b7   /;<.........W!h.
              02b0 - 2f f4 6f 0c 4b d0 8f 1a-20 aa 3f 0f 09 fe f0 bc   /.o.K... .?.....
              02c0 - 30 00 ee bf 42 67 ca 4e-12 c2 fb b8 4c 68 fc 68   0...Bg.N....Lh.h
              02d0 - 1b 4e 66 75 2e 16 83 0f-3c 89 4d ca 27 3f 48 9c   .Nfu....<.M.'?H.
              02e0 - db e9 21 96 a8 7a 4b 04-53 63 e8 cf 10 2d 1b 8c   ..!..zK.Sc...-..
              02f0 - 0f fe a0 25 b0 f5 91 7e-45 03 57 a8 7a a2 fc ea   ...%...~E.W.z...
              0300 - f7 4a 48 29 b2 57 ee e8-1c 5e f6 67 e7 34 ff 18   .JH).W...^.g.4..
              0310 - 98 58 84 f7 43 6c 9b 10-e5 0c c6 19 05 f0 94 a1   .X..Cl..........
              0320 - 50 17 5e 2c a2 eb 2f 1d-41 37 b5 51 16 c1 20 ad   P.^,../.A7.Q.. .
              0330 - 34 c2 6b 46 9c ef 49 0f-b2 22 bc 4b 18 9e 58 a5   4.kF..I..".K..X.
              0340 - d9 28 e7 10 0d 34 62 6c-49 a4 e4 ad 49 2d 7f 8a   .(...4blI...I-..
              0350 - 17 ff 3b 4b 7a 9c 26 57-09 c6 07 22 b5 b7 38 30   ..;Kz.&W..."..80
              0360 - 66 70 bf c0 06 86 87 b6-5f e3 d2 b0 2d 24 a5 17   fp......_...-$..
              0370 - f6 6b 46 6b ff 6b cf b5-bf 50 a3 15 4f e9 1e 28   .kFk.k...P..O..(
              0380 - cd b9 ab 9e d5 24 4d 53-da 5b 55 4b 33 88 41 77   .....$MS.[UK3.Aw
              0390 - 20 74 25 80 41 b0 95 7b-89 d1 a6 7a d5 d1 b7 22    t%.A..{...z..."
              03a0 - 63 a1 ca 3b 26 d7 19 e2-70 b8 f5 06 95 37 91 c9   c..;&...p....7..
              03b0 - 24 a5 c1 b3 68 2d 6b 55-5f 7a f7 a3 b9 3d 8e 6e   $...h-kU_z...=.n
              03c0 - 4d 2f 91 5f 21 99 48 29-1e fd da f9 53 a2 0c 90   M/._!.H)....S...
              03d0 - 40 49 6b 81 39 84 ae 6f-c4 58 af b0 46 47 48 2f   @Ik.9..o.X..FGH/
              03e0 - 5f 97 61 86 a8 c7 e6 4e-ce c3 b6 8a 66 88 31 ad   _.a....N....f.1.
              03f0 - 65 5a 5e 73 e2 e3 18 bc-e5 4c 08 bc 7a ff 1f cb   eZ^s.....L..z...
              0400 - 01 1b 7d ae 5e a8 8d d2-67 41 ce 84 63 21 3b c1   ..}.^...gA..c!;.
           
              Start Time: 1637322082
              Timeout   : 7200 (sec)
              Verify return code: 0 (ok)
              Extended master secret: no
              Max Early Data: 0
          ---
          read R BLOCK
          
          

          LCB connection string

          couchbases://172.23.111.144?bootstrap_on=cccp&truststorepath=/Users/jakerawsthorne/Code/cbsdk/libcouchbase/ca.pem&ssl=on&certpath=/Users/jakerawsthorne/Code/cbsdk/libcouchbase/client.pem&keypath=/Users/jakerawsthorne/Code/cbsdk/libcouchbase/client.key

          2051ms [I2938d56259e307c1] {78411/307} [INFO] (instance - L:521) Version=3.2.3_10_gb17efe6363, Changeset=b17efe636333a0f1db9347066749d05560de0bc9
          2051ms [I2938d56259e307c1] {78411/307} [INFO] (instance - L:522) Effective connection string: couchbases://172.23.111.144?bootstrap_on=cccp&truststorepath=/Users/jakerawsthorne/Code/cbsdk/libcouchbase/ca.pem&ssl=on&certpath=/Users/jakerawsthorne/Code/cbsdk/libcouchbase/client.pem&keypath=/Users/jakerawsthorne/Code/cbsdk/libcouchbase/client.key. Bucket=(null)
          2053ms [I2938d56259e307c1] {78411/307} [DEBUG] (SSL - L:355) Load verify locations from "/Users/jakerawsthorne/Code/cbsdk/libcouchbase/ca.pem"
          2054ms [I2938d56259e307c1] {78411/307} [DEBUG] (SSL - L:361) Authenticate with key "/Users/jakerawsthorne/Code/cbsdk/libcouchbase/client.key", cert "/Users/jakerawsthorne/Code/cbsdk/libcouchbase/client.pem"
          2958ms [I2938d56259e307c1] {78411/307} [INFO] (instance - L:212) DNS SRV lookup failed: LCB_ERR_UNKNOWN_HOST (1049). Ignore this if not relying on DNS SRV records
          2958ms [I2938d56259e307c1] {78411/307} [DEBUG] (instance - L:155) Adding host 172.23.111.144:18091 to initial HTTP bootstrap list
          2958ms [I2938d56259e307c1] {78411/307} [DEBUG] (instance - L:155) Adding host 172.23.111.144:11207 to initial CCCP bootstrap list
          2958ms [I2938d56259e307c1] {78411/307} [TRACE] (instance - L:193) Bootstrap hosts loaded (cccp:1, http:1)
          2958ms [I2938d56259e307c1] {78411/307} [INFO] (bootstrap - L:277) Requested network configuration: heuristic
          2958ms [I2938d56259e307c1] {78411/307} [DEBUG] (confmon - L:94) Preparing providers (this may be called multiple times)
          2958ms [I2938d56259e307c1] {78411/307} [DEBUG] (confmon - L:100) Provider CCCP is ENABLED
          2958ms [I2938d56259e307c1] {78411/307} [TRACE] (confmon - L:319) Refreshing current cluster map (bucket: (null))
          2958ms [I2938d56259e307c1] {78411/307} [INFO] (cccp - L:176) Requesting connection to node 172.23.111.144:11207 for CCCP configuration
          2958ms [I2938d56259e307c1] {78411/307} [DEBUG] (lcbio_mgr - L:501) <172.23.111.144:11207> (HE=0x7f9724a11000) Creating new connection because none are available in the pool
          2958ms [I2938d56259e307c1] {78411/307} [TRACE] (lcbio_mgr - L:413) <172.23.111.144:11207> (HE=0x7f9724a11000) New pool entry: I=0x7f9724a11270
          2958ms [I2938d56259e307c1] {78411/307} [INFO] (connection - L:497) <172.23.111.144:11207> (SOCK=95ae848cbe63afdb) Starting. Timeout=2000000us
          2958ms [I2938d56259e307c1] {78411/307} [DEBUG] (connection - L:262) <172.23.111.144:11207> (SOCK=95ae848cbe63afdb) Created new socket with FD=4
          2959ms [I2938d56259e307c1] {78411/307} [TRACE] (connection - L:362) <172.23.111.144:11207> (SOCK=95ae848cbe63afdb) Scheduling I/O watcher for asynchronous connection completion.
          2959ms [I2938d56259e307c1] {78411/307} [TRACE] (confmon - L:305) Attempting to retrieve cluster map via CCCP
          3110ms [I2938d56259e307c1] {78411/307} [INFO] (connection - L:159) <172.23.111.144:11207> (SOCK=95ae848cbe63afdb) Connected established
          3110ms [I2938d56259e307c1] {78411/307} [DEBUG] (connection - L:106) <172.23.111.144:11207> (SOCK=95ae848cbe63afdb) Successfully set TCP_NODELAY
          3110ms [I2938d56259e307c1] {78411/307} [DEBUG] (connection - L:106) <172.23.111.144:11207> (SOCK=95ae848cbe63afdb) Successfully set TCP_KEEPALIVE
          3110ms [I2938d56259e307c1] {78411/307} [DEBUG] (lcbio_mgr - L:369) <172.23.111.144:11207> (HE=0x7f9724a11000) Received result for I=0x7f9724a11270,C=0x0; E=0x0
          3110ms [I2938d56259e307c1] {78411/307} [DEBUG] (lcbio_mgr - L:329) <172.23.111.144:11207> (HE=0x7f9724a11000) Assigning R=0x7f9724a11170 SOCKET=0x7f9724a114b0
          3110ms [I2938d56259e307c1] {78411/307} [DEBUG] (ioctx - L:94) <172.23.111.144:11207> (CTX=0x7f972481f300,unknown) Pairing with SOCK=95ae848cbe63afdb
          3110ms [I2938d56259e307c1] {78411/307} [DEBUG] (negotiation - L:470) <172.23.111.144:11207> (CTX=0x7f972481f300,sasl,SASLREQ=0x7f9725009e00) HELO identificator: {"a":"libcouchbase/3.2.3_10_gb17efe6363 (Darwin-19.6.0; x86_64; Clang 7.1.0)","i":"2938d56259e307c1/95ae848cbe63afdb"}, features: 0x02 (TLS), 0x06 (XATTR), 0x0b (JSON), 0x08 (Select bucket), 0x07 (XERROR), 0x03 (TCP nodelay), 0x0a (Snappy), 0x04 (Mutation seqno), 0x0f (Tracing), 0x12 (Collections), 0x0e (Unordered execution), 0x17 (Create as Deleted), 0x14 (Preserve Expiry)
          3110ms [I2938d56259e307c1] {78411/307} [TRACE] (SSL - L:240) <172.23.111.144:11207> sock=0x7f9724a114b0: ST(0x10). before SSL initialization. R(0x1) unknown (unknown)
          3270ms [I2938d56259e307c1] {78411/307} [TRACE] (SSL - L:240) <172.23.111.144:11207> sock=0x7f9724a114b0: ST(0x20). SSL negotiation finished successfully. R(0x1) unknown (unknown)
          3270ms [I2938d56259e307c1] {78411/307} [DEBUG] (SSL - L:245) sock=0x7f9724a114b0. Using SSL version TLSv1.3. Cipher=TLS_AES_256_GCM_SHA384
          3426ms [I2938d56259e307c1] {78411/307} [DEBUG] (negotiation - L:501) <172.23.111.144:11207> (CTX=0x7f972481f300,sasl,SASLREQ=0x7f9725009e00) Server supports features: 0x03 (TCP nodelay), 0x04 (Mutation seqno), 0x06 (XATTR), 0x07 (XERROR), 0x08 (Select bucket), 0x0a (Snappy), 0x0b (JSON), 0x0e (Unordered execution), 0x0f (Tracing), 0x12 (Collections), 0x14 (Preserve Expiry), 0x17 (Create as Deleted)
          3426ms [I2938d56259e307c1] {78411/307} [DEBUG] (ioctx - L:139) <172.23.111.144:11207> (CTX=0x7f972481f300,sasl) Destroying context. Pending Writes=0, Entered=true, Socket Refcount=1
          3426ms [I2938d56259e307c1] {78411/307} [DEBUG] (ioctx - L:94) <172.23.111.144:11207> (CTX=0x7f9723e04180,unknown) Pairing with SOCK=95ae848cbe63afdb
          5431ms [I2938d56259e307c1] {78411/307} [ERROR] (cccp - L:187) <172.23.111.144:11207> (CTX=0x7f9723e04180,bc_cccp) Could not get configuration: LCB_ERR_TIMEOUT (201)
          5431ms [I2938d56259e307c1] {78411/307} [DEBUG] (ioctx - L:139) <172.23.111.144:11207> (CTX=0x7f9723e04180,bc_cccp) Destroying context. Pending Writes=0, Entered=false, Socket Refcount=1
          5431ms [I2938d56259e307c1] {78411/307} [INFO] (confmon - L:216) Provider 'CCCP' failed: LCB_ERR_TIMEOUT (201)
          5431ms [I2938d56259e307c1] {78411/307} [TRACE] (confmon - L:265) Maximum provider reached. Resetting index
          5431ms [I2938d56259e307c1] {78411/307} [ERROR] (bootstrap - L:205) Failed to bootstrap client=0x7f9724804290. Error=LCB_ERR_NO_MATCHING_SERVER (1010) (Last=LCB_ERR_TIMEOUT (201)), Message="No more bootstrap providers remain"
          

          jake.rawsthorne Jake Rawsthorne added a comment - Using 7.1.0-1695 [nix-shell:~/Code/cbsdk/libcouchbase]$ openssl s_client -key client.key -cert client.pem -CAfile ca.pem 172.23.111.144:11207 CONNECTED(00000003) Can't use SSL_get_servername depth=1 CN = Couchbase Root CA verify return:1 depth=0 CN = Couchbase Server verify return:1 --- Certificate chain 0 s:CN = Couchbase Server i:CN = Couchbase Root CA 1 s:CN = Couchbase Root CA i:CN = Couchbase Root CA --- Server certificate -----BEGIN CERTIFICATE----- MIIDKTCCAhGgAwIBAgIQQAriieIIXsaNHFhqhvD1uTANBgkqhkiG9w0BAQsFADAc MRowGAYDVQQDExFDb3VjaGJhc2UgUm9vdCBDQTAeFw0yMTExMTkxMTMyMTRaFw0y MjExMTkxMTMyMTRaMBsxGTAXBgNVBAMTEENvdWNoYmFzZSBTZXJ2ZXIwggEiMA0G CSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOpF6By5sgf5P1fZcKWKC1QTQV/6OS LIxL+d4aXs+QJPL9Cf1JB+lEP+pfVbsy3bT6xWeyPilUWehCKeRKLSnHBzpM1LHM paD8uNAGhjW4kDxAhfR/MUYETycKsDRWHdKIzJaFukFJbz0HrUgOHkagxO/ZZ+AZ scdbutKhOpX0WT4MrI2abpKfUTBT4XTbyiGPrct5Km1k56tkvvFUj4xsITUPDwSu gN8jwlIZifQReXtFTLpJGWxWLae0F0kn5B3wDbaOHMG6J1XPV7r4DKYc6saXy4j0 tQEcElgNT/GnR70nURbcGBcUcfsQ9qz1gvX9DUaGd1T6kK2GGFgu8E99AgMBAAGj aDBmMA4GA1UdDwEB/wQEAwIFoDATBgNVHSUEDDAKBggrBgEFBQcDATANBgNVHQ4E BgQEaGFzaDAfBgNVHSMEGDAWgBSwusCNM/N+qUXYR6cEB4iKPF8F1jAPBgNVHREE CDAGhwSsF2+QMA0GCSqGSIb3DQEBCwUAA4IBAQCiZmylFfUkzP5wje1EvoxHNW/K NvbCyZBYoVXdO4R7zXYJHE+DIYihpkRH+s/KoFSNoLjgS295pMwxZfDnPAjDMHvM qbwLIyBzNfu2xL1NS6i1X5FbFoFZssQigwxwaXmssuR3c6YpQiiQ4ppPq6IaljQT NsYkhMY9QAIc4YEvFqY9cpZIQPBz0mKCZiWwsfhnjRN7SrSuTLX9wkJgA5TG8wjw lt+ORcJO5frxB6KpaljNEs+jYbaWhxzbOK7mHTtkwxGsP/w/UvSdX/1Mh1V1Zs6s JAgCECV2cPSKpwxBxIEQk1NW9sDAnno0L8FRNzUram+xIMxrcBMz1Pb9i4bQ -----END CERTIFICATE----- subject=CN = Couchbase Server   issuer=CN = Couchbase Root CA   --- Acceptable client certificate CA names CN = Couchbase Server Requested Signature Algorithms: ECDSA+SHA256:ECDSA+SHA384:ECDSA+SHA512:Ed25519:Ed448:RSA-PSS+SHA256:RSA-PSS+SHA384:RSA-PSS+SHA512:RSA-PSS+SHA256:RSA-PSS+SHA384:RSA-PSS+SHA512:RSA+SHA256:RSA+SHA384:RSA+SHA512:ECDSA+SHA224:ECDSA+SHA1:RSA+SHA224:RSA+SHA1 Shared Requested Signature Algorithms: ECDSA+SHA256:ECDSA+SHA384:ECDSA+SHA512:Ed25519:Ed448:RSA-PSS+SHA256:RSA-PSS+SHA384:RSA-PSS+SHA512:RSA-PSS+SHA256:RSA-PSS+SHA384:RSA-PSS+SHA512:RSA+SHA256:RSA+SHA384:RSA+SHA512 Peer signing digest: SHA256 Peer signature type: RSA-PSS Server Temp Key: X25519, 253 bits --- SSL handshake has read 2259 bytes and written 2309 bytes Verification: OK --- New, TLSv1.3, Cipher is TLS_AES_256_GCM_SHA384 Server public key is 2048 bit Secure Renegotiation IS NOT supported Compression: NONE Expansion: NONE No ALPN negotiated Early data was not sent Verify return code: 0 (ok) --- --- Post-Handshake New Session Ticket arrived: SSL-Session: Protocol : TLSv1.3 Cipher : TLS_AES_256_GCM_SHA384 Session-ID: 2D1AB038A60E7F026CC3DCA5CC09F34E38C8A4B1B9354123FC60A912C96073C0 Session-ID-ctx: Resumption PSK: 19DAB783ABA7C8C5BFE62F2069B02C0E673A3CB84CC71481ABB47BA0635216B7C8AAE8C83C3C7D5744FAF711EFD93680 PSK identity: None PSK identity hint: None SRP username: None TLS session ticket lifetime hint: 7200 (seconds) TLS session ticket: 0000 - c5 e5 52 77 77 c6 66 24-ca 4c b3 92 03 0c 27 6d ..Rww.f$.L....'m 0010 - 43 39 7a e2 f3 61 37 d3-db 66 34 96 75 d8 7c 78 C9z..a7..f4.u.|x 0020 - 7a 8d e0 96 51 59 d0 d2-81 2b c4 97 a5 38 80 23 z...QY...+...8.# 0030 - 08 a6 ef 30 45 61 a6 72-29 1b b1 1e 79 e4 a3 f3 ...0Ea.r)...y... 0040 - 60 bd f1 11 e7 3a 5c 61-c0 7c 46 a7 7a 1a 3e 7b `....:\a.|F.z.>{ 0050 - 8c 84 32 d6 37 3a 2f cf-a6 ab 4b 83 a8 eb b9 da ..2.7:/...K..... 0060 - 59 9e 3e e1 dc a8 62 4b-54 95 ac 8f f0 63 50 46 Y.>...bKT....cPF 0070 - 1e 2c 33 48 e8 42 1c 38-af bf e5 7b b6 24 f1 22 .,3H.B.8...{.$." 0080 - d2 00 84 86 fb 4b f5 3f-29 f3 87 42 95 c7 1d 6e .....K.?)..B...n 0090 - 89 28 42 8e a0 5d 0f 12-97 9c 75 21 1b 38 83 d9 .(B..]....u!.8.. 00a0 - b7 a9 d0 6e ee a2 47 44-6d a9 68 e0 9c 51 60 f5 ...n..GDm.h..Q`. 00b0 - bd a1 f9 c6 4a 8c bb 53-c0 37 3a cf e3 64 31 ba ....J..S.7:..d1. 00c0 - cf bf 4b f8 d0 ac 36 fc-57 ea ac 90 f9 c6 b4 98 ..K...6.W....... 00d0 - 57 22 f8 f4 9e 84 57 d9-14 7b 65 a9 9e 1a aa b5 W"....W..{e..... 00e0 - e4 ef f7 a6 41 b6 54 34-18 09 44 05 42 79 d9 d6 ....A.T4..D.By.. 00f0 - b8 ee 2c 74 f5 ad 65 0f-9b 84 09 57 d4 cf d3 56 ..,t..e....W...V 0100 - 04 64 85 4c a5 4d 68 a6-38 96 6d fb e8 4b d6 ec .d.L.Mh.8.m..K.. 0110 - d5 31 a1 b6 d1 7e fc 00-aa f4 d6 cc af 16 1e 5a .1...~.........Z 0120 - bd 66 16 bb 10 c2 06 a1-9a cd 35 30 cc d6 db 4a .f........50...J 0130 - 82 45 ab fa 8d 7a bf b7-3d 3a da 30 e9 a5 12 e4 .E...z..=:.0.... 0140 - f1 e2 ff 64 7f 92 77 15-e4 0d fb 47 fd 96 85 7b ...d..w....G...{ 0150 - 97 c6 f5 fe 57 ca 44 78-dd 49 6b af 6b e9 05 eb ....W.Dx.Ik.k... 0160 - 05 01 c3 49 f8 62 49 b9-60 2e 40 d0 9b 58 f9 11 ...I.bI.`.@..X.. 0170 - 59 3a df 03 f7 f2 a6 88-16 e3 32 59 25 c0 da aa Y:........2Y%... 0180 - ad e2 e7 09 06 76 2d 93-c3 02 89 df f3 b9 d2 f2 .....v-......... 0190 - f0 04 46 ef c8 99 94 86-03 46 3e dd 4b d6 27 16 ..F......F>.K.'. 01a0 - 2f 86 9d 0b 6f e1 9f 3c-67 27 d7 9a 35 86 4b 66 /...o..<g'..5.Kf 01b0 - 83 7c f4 08 c5 43 fb cd-4e 16 77 7e 64 d8 bd 9a .|...C..N.w~d... 01c0 - f2 84 e3 bd dc a5 5d bb-5c 5a e7 0d 0a ee da 4a ......].\Z.....J 01d0 - 53 fd 20 c2 6a 64 12 0c-3a db 01 72 c3 ee 74 42 S. .jd..:..r..tB 01e0 - 04 0f 38 4a b4 39 02 90-a0 8a 55 c7 21 0f 4e 82 ..8J.9....U.!.N. 01f0 - 46 86 1e 02 59 e5 4a 34-46 e1 ce b8 ea 1a f3 23 F...Y.J4F......# 0200 - a2 9e 0b c1 a3 ac 1b 63-bd 57 c7 b7 09 1e 9d 80 .......c.W...... 0210 - ad cb 3d 7e 9e e6 fa e2-d3 84 17 9e 54 1b 24 fd ..=~........T.$. 0220 - f0 25 9d 46 c3 18 32 bf-4a 89 b8 0e b8 44 5a 09 .%.F..2.J....DZ. 0230 - ff 61 e5 4c 76 8e fd 49-96 f9 f1 37 33 fd f1 29 .a.Lv..I...73..) 0240 - fa 3d 23 97 5d e7 51 d3-13 96 a5 f7 5e 97 07 70 .=#.].Q.....^..p 0250 - 03 43 9d a6 43 93 38 c8-1c 0b ef 98 ae 96 44 fa .C..C.8.......D. 0260 - e2 19 23 39 d3 31 f2 15-02 23 5f e6 c2 fe b2 83 ..#9.1...#_..... 0270 - fa de 62 a4 0c bb 3b 46-2f 1a 5b eb 5f 70 04 d6 ..b...;F/.[._p.. 0280 - cf 15 61 c8 0a f1 7f e5-ec e1 7b 65 3a ef 2d 84 ..a.......{e:.-. 0290 - e1 3c e1 3d 67 7f 11 72-a8 5d 46 52 a1 41 1f 87 .<.=g..r.]FR.A.. 02a0 - a5 be 43 8d fb 72 e1 fe-3b 18 9b cb 96 b2 dc 09 ..C..r..;....... 02b0 - 65 24 88 3e 40 7f dd ce-4a 03 95 2f 70 96 aa da e$.>@...J../p... 02c0 - 63 7d 5b 98 b6 e7 6b 4d-d5 2e 1e fb 2e 1d 5c f8 c}[...kM......\. 02d0 - 3c 84 aa 66 39 2c c7 e1-a0 b4 6e 39 90 90 ab ee <..f9,....n9.... 02e0 - f4 7d 84 44 f8 cc 6b b6-14 79 00 3c 9c ce ea 1d .}.D..k..y.<.... 02f0 - 2f 3b 51 da 04 29 24 99-89 a4 6a 1a 05 22 03 da /;Q..)$...j..".. 0300 - 69 a8 9c 81 cd bc fa b8-bd 17 b7 33 13 77 b5 dc i..........3.w.. 0310 - 43 51 60 58 27 f3 40 b2-94 36 2e 30 5f b1 96 97 CQ`X'.@..6.0_... 0320 - cf 04 26 aa d4 a8 16 ec-28 99 68 57 6d 4f fb 05 ..&.....(.hWmO.. 0330 - a9 28 0d 5a d2 26 cc 87-24 a9 5a df 6d 3f df 67 .(.Z.&..$.Z.m?.g 0340 - 65 99 87 07 e3 d6 6b 3c-bb aa 77 d9 83 ef d3 ab e.....k<..w..... 0350 - bf 67 de d2 e4 d5 cb 9a-0a fd 63 3b 16 d7 5b 4c .g........c;..[L 0360 - 7d 07 a9 f6 9f b9 f8 66-4d a4 d9 39 25 73 cf 40 }......fM..9%s.@ 0370 - 04 77 0a f8 b3 12 3a 67-d7 c1 39 56 22 f6 aa 9e .w....:g..9V"... 0380 - 44 91 c1 aa 08 63 c3 36-8e f5 73 78 5f 41 96 e1 D....c.6..sx_A.. 0390 - a5 bc a9 31 14 17 3f d3-d3 44 f0 8f a6 71 f3 8b ...1..?..D...q.. 03a0 - c9 3b b5 2c 95 fd 40 30-a4 67 2e bf 2c f0 62 e0 .;.,..@0.g..,.b. 03b0 - 01 14 18 20 56 06 47 91-4c 36 33 d5 04 fb d9 ce ... V.G.L63..... 03c0 - 46 13 2b 88 fe 64 f2 5a-1c 43 c5 8d 6b ee e7 e8 F.+..d.Z.C..k... 03d0 - 08 39 ec 87 25 1f 1e 9a-99 d8 9d 4a d3 5d 31 67 .9..%......J.]1g 03e0 - 44 12 9c 25 fe 4c 6f c2-f4 2a d9 f7 3e ab 2e c0 D..%.Lo..*..>... 03f0 - 44 52 b2 7a b1 2c a2 1b-6a d4 d5 46 0c 34 4b 58 DR.z.,..j..F.4KX 0400 - b9 fc 74 32 1d 92 27 e1-94 78 2c a4 d3 39 22 b9 ..t2..'..x,..9".   Start Time: 1637322082 Timeout : 7200 (sec) Verify return code: 0 (ok) Extended master secret: no Max Early Data: 0 --- read R BLOCK --- Post-Handshake New Session Ticket arrived: SSL-Session: Protocol : TLSv1.3 Cipher : TLS_AES_256_GCM_SHA384 Session-ID: 9CDA8F9CB3E175D330ED187313048014DFC366408D3E879932CBA3E1907D51A6 Session-ID-ctx: Resumption PSK: 7CB306F5E5FB7ACDF9C16DC0D32D1069ACE011AB640FAD77D977F79107F03F87910E151CD15C7FD6AE7E06B179935ED8 PSK identity: None PSK identity hint: None SRP username: None TLS session ticket lifetime hint: 7200 (seconds) TLS session ticket: 0000 - c5 e5 52 77 77 c6 66 24-ca 4c b3 92 03 0c 27 6d ..Rww.f$.L....'m 0010 - b8 55 76 99 30 96 67 c5-56 dd bc 31 5a c1 f4 4d .Uv.0.g.V..1Z..M 0020 - 27 96 93 70 52 d2 c3 d8-28 ae 4e df 2d 3b 6c d5 '..pR...(.N.-;l. 0030 - e8 7d ed 4e b7 98 33 a5-25 07 16 08 5b 7d 5d 6d .}.N..3.%...[}]m 0040 - 82 ee e9 12 5c c5 93 1e-47 2e 0e bb c8 7e 28 d2 ....\...G....~(. 0050 - cf 6d 81 22 ca 9e db fc-51 db 81 ba c6 7e 1e cb .m."....Q....~.. 0060 - 25 3f 00 3f 8c 2a 1b 0f-0c 29 0a f6 fd 0a 47 79 %?.?.*...)....Gy 0070 - a1 ce f8 d7 32 98 f8 f1-34 4e fa 6e e8 0b 26 81 ....2...4N.n..&. 0080 - ae 59 8c 7d 6c dc b4 45-18 a1 48 1b fe 90 e8 15 .Y.}l..E..H..... 0090 - 81 a1 92 89 08 b5 ec 04-ba fa e6 ee e0 5c f1 e6 .............\.. 00a0 - d8 61 64 a6 94 41 21 f6-42 2c 2d 76 e3 13 6e b3 .ad..A!.B,-v..n. 00b0 - 69 7d f7 e1 36 89 a7 2f-12 e7 d6 79 91 65 72 44 i}..6../...y.erD 00c0 - bb 5d 5c 4e 92 68 7d 18-e8 2b 6b ea 65 5b f6 d4 .]\N.h}..+k.e[.. 00d0 - 99 d4 b6 a4 2d 0a b0 13-d3 de 13 0c c1 28 b5 1d ....-........(.. 00e0 - c5 40 4c 15 7f 9c 9f 48-ef dc 9d c6 4b 7e 73 52 .@L....H....K~sR 00f0 - d3 41 cb 20 ef 3a 0e 54-a0 f1 a8 75 26 a0 d0 a7 .A. .:.T...u&... 0100 - 65 03 8b d6 ce f1 1d ec-d4 6d d2 ad 60 ef e9 8c e........m..`... 0110 - 03 7e ba be 79 62 33 1e-f1 10 a2 fa 90 c1 f4 5e .~..yb3........^ 0120 - 7f 74 72 0d fd de b9 ea-cf 4d 8e ef b0 b9 98 b2 .tr......M...... 0130 - 77 09 73 78 33 b1 aa 53-a7 83 56 55 79 9e db 50 w.sx3..S..VUy..P 0140 - a4 34 8a 1a be a7 c6 4b-a3 c1 ac 47 34 11 b8 a8 .4.....K...G4... 0150 - e9 79 4a d5 3c 71 af ee-6a 81 55 60 4f 9d 0f 8b .yJ.<q..j.U`O... 0160 - 3f f0 62 a2 d9 26 20 fb-93 9f 56 5d bc b9 1f 68 ?.b..& ...V]...h 0170 - 20 f1 d6 04 f7 d5 42 1f-30 74 eb ed 20 d2 2b 8d .....B.0t.. .+. 0180 - 32 68 42 d9 94 c7 97 cb-6f 27 9a 12 9a 10 99 d9 2hB.....o'...... 0190 - e6 95 b5 e4 5e 8c b0 97-b1 4a 26 4c 9f cb 26 95 ....^....J&L..&. 01a0 - f8 5f 42 04 9b e8 f0 44-d0 06 e6 a4 b7 b7 8c fc ._B....D........ 01b0 - a8 ce 63 7c 83 48 d2 ce-cc 57 0b 52 ff a9 64 db ..c|.H...W.R..d. 01c0 - e7 e5 f7 da bc d5 a6 0f-df e0 6d ab 07 15 83 0f ..........m..... 01d0 - db 6e 8c 40 71 0d 48 81-c3 25 d7 22 0a ad 30 c5 .n.@q.H..%."..0. 01e0 - 12 31 5d 23 81 0d 19 71-dd 83 32 57 a9 bc c1 f9 .1]#...q..2W.... 01f0 - c0 25 1f 31 c3 b4 de 21-fe 80 e5 24 a4 4d 5e 8c .%.1...!...$.M^. 0200 - 6c 7e 21 8e 97 7a 5e a4-2a 74 3a 5f 5f bb 03 7a l~!..z^.*t:__..z 0210 - 3d 11 85 62 d3 71 62 32-d8 18 3f a6 d3 c3 dd ad =..b.qb2..?..... 0220 - fd 69 38 4b f7 9a 49 9c-af 78 d0 8d c2 90 39 43 .i8K..I..x....9C 0230 - 09 0d c5 24 4a 03 57 36-84 a9 2e 5d d3 58 e1 9d ...$J.W6...].X.. 0240 - e1 b9 b4 e5 58 a5 ed 87-2d 7b 0c 5f e7 0d 16 8c ....X...-{._.... 0250 - ef 2d 70 35 85 05 da ba-3e 3b 04 8a 29 f1 f1 99 .-p5....>;..)... 0260 - ca 96 ba 85 63 1d 47 66-28 87 90 4d 48 28 c1 1b ....c.Gf(..MH(.. 0270 - ef be 37 9e a2 d0 8c 75-6c 7c f4 d4 24 1b ba 61 ..7....ul|..$..a 0280 - 43 7d 21 d6 ce 47 d6 6c-3b af 4b b6 0d 68 64 c5 C}!..G.l;.K..hd. 0290 - 55 10 f6 49 f6 26 9f 90-85 c3 e9 93 33 7f 8b ee U..I.&......3... 02a0 - 2f 3b 3c 89 f3 94 86 ea-d6 88 0c cc 57 21 68 b7 /;<.........W!h. 02b0 - 2f f4 6f 0c 4b d0 8f 1a-20 aa 3f 0f 09 fe f0 bc /.o.K... .?..... 02c0 - 30 00 ee bf 42 67 ca 4e-12 c2 fb b8 4c 68 fc 68 0...Bg.N....Lh.h 02d0 - 1b 4e 66 75 2e 16 83 0f-3c 89 4d ca 27 3f 48 9c .Nfu....<.M.'?H. 02e0 - db e9 21 96 a8 7a 4b 04-53 63 e8 cf 10 2d 1b 8c ..!..zK.Sc...-.. 02f0 - 0f fe a0 25 b0 f5 91 7e-45 03 57 a8 7a a2 fc ea ...%...~E.W.z... 0300 - f7 4a 48 29 b2 57 ee e8-1c 5e f6 67 e7 34 ff 18 .JH).W...^.g.4.. 0310 - 98 58 84 f7 43 6c 9b 10-e5 0c c6 19 05 f0 94 a1 .X..Cl.......... 0320 - 50 17 5e 2c a2 eb 2f 1d-41 37 b5 51 16 c1 20 ad P.^,../.A7.Q.. . 0330 - 34 c2 6b 46 9c ef 49 0f-b2 22 bc 4b 18 9e 58 a5 4.kF..I..".K..X. 0340 - d9 28 e7 10 0d 34 62 6c-49 a4 e4 ad 49 2d 7f 8a .(...4blI...I-.. 0350 - 17 ff 3b 4b 7a 9c 26 57-09 c6 07 22 b5 b7 38 30 ..;Kz.&W..."..80 0360 - 66 70 bf c0 06 86 87 b6-5f e3 d2 b0 2d 24 a5 17 fp......_...-$.. 0370 - f6 6b 46 6b ff 6b cf b5-bf 50 a3 15 4f e9 1e 28 .kFk.k...P..O..( 0380 - cd b9 ab 9e d5 24 4d 53-da 5b 55 4b 33 88 41 77 .....$MS.[UK3.Aw 0390 - 20 74 25 80 41 b0 95 7b-89 d1 a6 7a d5 d1 b7 22 t%.A..{...z..." 03a0 - 63 a1 ca 3b 26 d7 19 e2-70 b8 f5 06 95 37 91 c9 c..;&...p....7.. 03b0 - 24 a5 c1 b3 68 2d 6b 55-5f 7a f7 a3 b9 3d 8e 6e $...h-kU_z...=.n 03c0 - 4d 2f 91 5f 21 99 48 29-1e fd da f9 53 a2 0c 90 M/._!.H)....S... 03d0 - 40 49 6b 81 39 84 ae 6f-c4 58 af b0 46 47 48 2f @Ik.9..o.X..FGH/ 03e0 - 5f 97 61 86 a8 c7 e6 4e-ce c3 b6 8a 66 88 31 ad _.a....N....f.1. 03f0 - 65 5a 5e 73 e2 e3 18 bc-e5 4c 08 bc 7a ff 1f cb eZ^s.....L..z... 0400 - 01 1b 7d ae 5e a8 8d d2-67 41 ce 84 63 21 3b c1 ..}.^...gA..c!;.   Start Time: 1637322082 Timeout : 7200 (sec) Verify return code: 0 (ok) Extended master secret: no Max Early Data: 0 --- read R BLOCK LCB connection string couchbases://172.23.111.144?bootstrap_on=cccp&truststorepath=/Users/jakerawsthorne/Code/cbsdk/libcouchbase/ca.pem&ssl=on&certpath=/Users/jakerawsthorne/Code/cbsdk/libcouchbase/client.pem&keypath=/Users/jakerawsthorne/Code/cbsdk/libcouchbase/client.key 2051ms [I2938d56259e307c1] {78411/307} [INFO] (instance - L:521) Version=3.2.3_10_gb17efe6363, Changeset=b17efe636333a0f1db9347066749d05560de0bc9 2051ms [I2938d56259e307c1] {78411/307} [INFO] (instance - L:522) Effective connection string: couchbases://172.23.111.144?bootstrap_on=cccp&truststorepath=/Users/jakerawsthorne/Code/cbsdk/libcouchbase/ca.pem&ssl=on&certpath=/Users/jakerawsthorne/Code/cbsdk/libcouchbase/client.pem&keypath=/Users/jakerawsthorne/Code/cbsdk/libcouchbase/client.key. Bucket=(null) 2053ms [I2938d56259e307c1] {78411/307} [DEBUG] (SSL - L:355) Load verify locations from "/Users/jakerawsthorne/Code/cbsdk/libcouchbase/ca.pem" 2054ms [I2938d56259e307c1] {78411/307} [DEBUG] (SSL - L:361) Authenticate with key "/Users/jakerawsthorne/Code/cbsdk/libcouchbase/client.key", cert "/Users/jakerawsthorne/Code/cbsdk/libcouchbase/client.pem" 2958ms [I2938d56259e307c1] {78411/307} [INFO] (instance - L:212) DNS SRV lookup failed: LCB_ERR_UNKNOWN_HOST (1049). Ignore this if not relying on DNS SRV records 2958ms [I2938d56259e307c1] {78411/307} [DEBUG] (instance - L:155) Adding host 172.23.111.144:18091 to initial HTTP bootstrap list 2958ms [I2938d56259e307c1] {78411/307} [DEBUG] (instance - L:155) Adding host 172.23.111.144:11207 to initial CCCP bootstrap list 2958ms [I2938d56259e307c1] {78411/307} [TRACE] (instance - L:193) Bootstrap hosts loaded (cccp:1, http:1) 2958ms [I2938d56259e307c1] {78411/307} [INFO] (bootstrap - L:277) Requested network configuration: heuristic 2958ms [I2938d56259e307c1] {78411/307} [DEBUG] (confmon - L:94) Preparing providers (this may be called multiple times) 2958ms [I2938d56259e307c1] {78411/307} [DEBUG] (confmon - L:100) Provider CCCP is ENABLED 2958ms [I2938d56259e307c1] {78411/307} [TRACE] (confmon - L:319) Refreshing current cluster map (bucket: (null)) 2958ms [I2938d56259e307c1] {78411/307} [INFO] (cccp - L:176) Requesting connection to node 172.23.111.144:11207 for CCCP configuration 2958ms [I2938d56259e307c1] {78411/307} [DEBUG] (lcbio_mgr - L:501) <172.23.111.144:11207> (HE=0x7f9724a11000) Creating new connection because none are available in the pool 2958ms [I2938d56259e307c1] {78411/307} [TRACE] (lcbio_mgr - L:413) <172.23.111.144:11207> (HE=0x7f9724a11000) New pool entry: I=0x7f9724a11270 2958ms [I2938d56259e307c1] {78411/307} [INFO] (connection - L:497) <172.23.111.144:11207> (SOCK=95ae848cbe63afdb) Starting. Timeout=2000000us 2958ms [I2938d56259e307c1] {78411/307} [DEBUG] (connection - L:262) <172.23.111.144:11207> (SOCK=95ae848cbe63afdb) Created new socket with FD=4 2959ms [I2938d56259e307c1] {78411/307} [TRACE] (connection - L:362) <172.23.111.144:11207> (SOCK=95ae848cbe63afdb) Scheduling I/O watcher for asynchronous connection completion. 2959ms [I2938d56259e307c1] {78411/307} [TRACE] (confmon - L:305) Attempting to retrieve cluster map via CCCP 3110ms [I2938d56259e307c1] {78411/307} [INFO] (connection - L:159) <172.23.111.144:11207> (SOCK=95ae848cbe63afdb) Connected established 3110ms [I2938d56259e307c1] {78411/307} [DEBUG] (connection - L:106) <172.23.111.144:11207> (SOCK=95ae848cbe63afdb) Successfully set TCP_NODELAY 3110ms [I2938d56259e307c1] {78411/307} [DEBUG] (connection - L:106) <172.23.111.144:11207> (SOCK=95ae848cbe63afdb) Successfully set TCP_KEEPALIVE 3110ms [I2938d56259e307c1] {78411/307} [DEBUG] (lcbio_mgr - L:369) <172.23.111.144:11207> (HE=0x7f9724a11000) Received result for I=0x7f9724a11270,C=0x0; E=0x0 3110ms [I2938d56259e307c1] {78411/307} [DEBUG] (lcbio_mgr - L:329) <172.23.111.144:11207> (HE=0x7f9724a11000) Assigning R=0x7f9724a11170 SOCKET=0x7f9724a114b0 3110ms [I2938d56259e307c1] {78411/307} [DEBUG] (ioctx - L:94) <172.23.111.144:11207> (CTX=0x7f972481f300,unknown) Pairing with SOCK=95ae848cbe63afdb 3110ms [I2938d56259e307c1] {78411/307} [DEBUG] (negotiation - L:470) <172.23.111.144:11207> (CTX=0x7f972481f300,sasl,SASLREQ=0x7f9725009e00) HELO identificator: {"a":"libcouchbase/3.2.3_10_gb17efe6363 (Darwin-19.6.0; x86_64; Clang 7.1.0)","i":"2938d56259e307c1/95ae848cbe63afdb"}, features: 0x02 (TLS), 0x06 (XATTR), 0x0b (JSON), 0x08 (Select bucket), 0x07 (XERROR), 0x03 (TCP nodelay), 0x0a (Snappy), 0x04 (Mutation seqno), 0x0f (Tracing), 0x12 (Collections), 0x0e (Unordered execution), 0x17 (Create as Deleted), 0x14 (Preserve Expiry) 3110ms [I2938d56259e307c1] {78411/307} [TRACE] (SSL - L:240) <172.23.111.144:11207> sock=0x7f9724a114b0: ST(0x10). before SSL initialization. R(0x1) unknown (unknown) 3270ms [I2938d56259e307c1] {78411/307} [TRACE] (SSL - L:240) <172.23.111.144:11207> sock=0x7f9724a114b0: ST(0x20). SSL negotiation finished successfully. R(0x1) unknown (unknown) 3270ms [I2938d56259e307c1] {78411/307} [DEBUG] (SSL - L:245) sock=0x7f9724a114b0. Using SSL version TLSv1.3. Cipher=TLS_AES_256_GCM_SHA384 3426ms [I2938d56259e307c1] {78411/307} [DEBUG] (negotiation - L:501) <172.23.111.144:11207> (CTX=0x7f972481f300,sasl,SASLREQ=0x7f9725009e00) Server supports features: 0x03 (TCP nodelay), 0x04 (Mutation seqno), 0x06 (XATTR), 0x07 (XERROR), 0x08 (Select bucket), 0x0a (Snappy), 0x0b (JSON), 0x0e (Unordered execution), 0x0f (Tracing), 0x12 (Collections), 0x14 (Preserve Expiry), 0x17 (Create as Deleted) 3426ms [I2938d56259e307c1] {78411/307} [DEBUG] (ioctx - L:139) <172.23.111.144:11207> (CTX=0x7f972481f300,sasl) Destroying context. Pending Writes=0, Entered=true, Socket Refcount=1 3426ms [I2938d56259e307c1] {78411/307} [DEBUG] (ioctx - L:94) <172.23.111.144:11207> (CTX=0x7f9723e04180,unknown) Pairing with SOCK=95ae848cbe63afdb 5431ms [I2938d56259e307c1] {78411/307} [ERROR] (cccp - L:187) <172.23.111.144:11207> (CTX=0x7f9723e04180,bc_cccp) Could not get configuration: LCB_ERR_TIMEOUT (201) 5431ms [I2938d56259e307c1] {78411/307} [DEBUG] (ioctx - L:139) <172.23.111.144:11207> (CTX=0x7f9723e04180,bc_cccp) Destroying context. Pending Writes=0, Entered=false, Socket Refcount=1 5431ms [I2938d56259e307c1] {78411/307} [INFO] (confmon - L:216) Provider 'CCCP' failed: LCB_ERR_TIMEOUT (201) 5431ms [I2938d56259e307c1] {78411/307} [TRACE] (confmon - L:265) Maximum provider reached. Resetting index 5431ms [I2938d56259e307c1] {78411/307} [ERROR] (bootstrap - L:205) Failed to bootstrap client=0x7f9724804290. Error=LCB_ERR_NO_MATCHING_SERVER (1010) (Last=LCB_ERR_TIMEOUT (201)), Message="No more bootstrap providers remain"

          Trying the same with 6.6.3 and it tries to parse the error map as cluster config

          [nix-shell:~/Code/cbsdk/libcouchbase/build]$ ./bin/examples/minimal "couchbases://172.23.111.140?bootstrap_on=cccp&truststorepath=/Users/jakerawsthorne/Code/cbsdk/libcouchbase/ca.pem&ssl=on&certpath=/Users/jakerawsthorne/Code/cbsdk/libcouchbase/client.pem&keypath=/Users/jakerawsthorne/Code/cbsdk/libcouchbase/client.key"
          0ms [Ia1eee2963c17293b] {50867/307} [INFO] (instance - L:521) Version=3.2.3_10_gb17efe6363, Changeset=b17efe636333a0f1db9347066749d05560de0bc9
          0ms [Ia1eee2963c17293b] {50867/307} [INFO] (instance - L:522) Effective connection string: couchbases://172.23.111.140?bootstrap_on=cccp&truststorepath=/Users/jakerawsthorne/Code/cbsdk/libcouchbase/ca.pem&ssl=on&certpath=/Users/jakerawsthorne/Code/cbsdk/libcouchbase/client.pem&keypath=/Users/jakerawsthorne/Code/cbsdk/libcouchbase/client.key. Bucket=(null)
          3ms [Ia1eee2963c17293b] {50867/307} [DEBUG] (SSL - L:355) Load verify locations from "/Users/jakerawsthorne/Code/cbsdk/libcouchbase/ca.pem"
          3ms [Ia1eee2963c17293b] {50867/307} [DEBUG] (SSL - L:361) Authenticate with key "/Users/jakerawsthorne/Code/cbsdk/libcouchbase/client.key", cert "/Users/jakerawsthorne/Code/cbsdk/libcouchbase/client.pem"
          4ms [Ia1eee2963c17293b] {50867/307} [FATAL] (SSL - L:392) LCB_TLS_LOG_KEYS was enabled during build, all TLS keys will be logged for network analysis to "/tmp/keys.txt" (https://wiki.wireshark.org/TLS). DO NOT USE THIS BUILD IN PRODUCTION
          938ms [Ia1eee2963c17293b] {50867/307} [INFO] (instance - L:212) DNS SRV lookup failed: LCB_ERR_UNKNOWN_HOST (1049). Ignore this if not relying on DNS SRV records
          938ms [Ia1eee2963c17293b] {50867/307} [DEBUG] (instance - L:155) Adding host 172.23.111.140:18091 to initial HTTP bootstrap list
          938ms [Ia1eee2963c17293b] {50867/307} [DEBUG] (instance - L:155) Adding host 172.23.111.140:11207 to initial CCCP bootstrap list
          938ms [Ia1eee2963c17293b] {50867/307} [TRACE] (instance - L:193) Bootstrap hosts loaded (cccp:1, http:1)
          938ms [Ia1eee2963c17293b] {50867/307} [INFO] (bootstrap - L:277) Requested network configuration: heuristic
          938ms [Ia1eee2963c17293b] {50867/307} [DEBUG] (confmon - L:94) Preparing providers (this may be called multiple times)
          938ms [Ia1eee2963c17293b] {50867/307} [DEBUG] (confmon - L:100) Provider CCCP is ENABLED
          938ms [Ia1eee2963c17293b] {50867/307} [TRACE] (confmon - L:319) Refreshing current cluster map (bucket: (null))
          938ms [Ia1eee2963c17293b] {50867/307} [INFO] (cccp - L:176) Requesting connection to node 172.23.111.140:11207 for CCCP configuration
          938ms [Ia1eee2963c17293b] {50867/307} [DEBUG] (lcbio_mgr - L:501) <172.23.111.140:11207> (HE=0x7f98d8d0e230) Creating new connection because none are available in the pool
          938ms [Ia1eee2963c17293b] {50867/307} [TRACE] (lcbio_mgr - L:413) <172.23.111.140:11207> (HE=0x7f98d8d0e230) New pool entry: I=0x7f98d8d0e4f0
          938ms [Ia1eee2963c17293b] {50867/307} [INFO] (connection - L:497) <172.23.111.140:11207> (SOCK=c0d13b2ba9964205) Starting. Timeout=2000000us
          938ms [Ia1eee2963c17293b] {50867/307} [DEBUG] (connection - L:262) <172.23.111.140:11207> (SOCK=c0d13b2ba9964205) Created new socket with FD=4
          938ms [Ia1eee2963c17293b] {50867/307} [TRACE] (connection - L:362) <172.23.111.140:11207> (SOCK=c0d13b2ba9964205) Scheduling I/O watcher for asynchronous connection completion.
          938ms [Ia1eee2963c17293b] {50867/307} [TRACE] (confmon - L:305) Attempting to retrieve cluster map via CCCP
          1091ms [Ia1eee2963c17293b] {50867/307} [INFO] (connection - L:159) <172.23.111.140:11207> (SOCK=c0d13b2ba9964205) Connected established
          1091ms [Ia1eee2963c17293b] {50867/307} [DEBUG] (connection - L:106) <172.23.111.140:11207> (SOCK=c0d13b2ba9964205) Successfully set TCP_NODELAY
          1091ms [Ia1eee2963c17293b] {50867/307} [DEBUG] (connection - L:106) <172.23.111.140:11207> (SOCK=c0d13b2ba9964205) Successfully set TCP_KEEPALIVE
          1091ms [Ia1eee2963c17293b] {50867/307} [DEBUG] (lcbio_mgr - L:369) <172.23.111.140:11207> (HE=0x7f98d8d0e230) Received result for I=0x7f98d8d0e4f0,C=0x0; E=0x0
          1091ms [Ia1eee2963c17293b] {50867/307} [DEBUG] (lcbio_mgr - L:329) <172.23.111.140:11207> (HE=0x7f98d8d0e230) Assigning R=0x7f98d8d0e3a0 SOCKET=0x7f98d8d0e6e0
          1091ms [Ia1eee2963c17293b] {50867/307} [DEBUG] (ioctx - L:94) <172.23.111.140:11207> (CTX=0x7f98da806240,unknown) Pairing with SOCK=c0d13b2ba9964205
          1091ms [Ia1eee2963c17293b] {50867/307} [DEBUG] (negotiation - L:470) <172.23.111.140:11207> (CTX=0x7f98da806240,sasl,SASLREQ=0x7f98db009200) HELO identificator: {"a":"libcouchbase/3.2.3_10_gb17efe6363 (Darwin-19.6.0; x86_64; Clang 7.1.0)","i":"a1eee2963c17293b/c0d13b2ba9964205"}, features: 0x02 (TLS), 0x06 (XATTR), 0x0b (JSON), 0x08 (Select bucket), 0x07 (XERROR), 0x03 (TCP nodelay), 0x0a (Snappy), 0x04 (Mutation seqno), 0x0f (Tracing), 0x12 (Collections), 0x0e (Unordered execution), 0x17 (Create as Deleted), 0x14 (Preserve Expiry)
          1091ms [Ia1eee2963c17293b] {50867/307} [TRACE] (SSL - L:240) <172.23.111.140:11207> sock=0x7f98d8d0e6e0: ST(0x10). before SSL initialization. R(0x1) unknown (unknown)
          1258ms [Ia1eee2963c17293b] {50867/307} [TRACE] (SSL - L:240) <172.23.111.140:11207> sock=0x7f98d8d0e6e0: ST(0x20). SSL negotiation finished successfully. R(0x1) unknown (unknown)
          1258ms [Ia1eee2963c17293b] {50867/307} [DEBUG] (SSL - L:245) sock=0x7f98d8d0e6e0. Using SSL version TLSv1.3. Cipher=TLS_AES_256_GCM_SHA384
          1417ms [Ia1eee2963c17293b] {50867/307} [DEBUG] (negotiation - L:501) <172.23.111.140:11207> (CTX=0x7f98da806240,sasl,SASLREQ=0x7f98db009200) Server supports features: 0x03 (TCP nodelay), 0x04 (Mutation seqno), 0x06 (XATTR), 0x07 (XERROR), 0x08 (Select bucket), 0x0a (Snappy), 0x0b (JSON), 0x0e (Unordered execution), 0x0f (Tracing), 0x17 (Create as Deleted)
          1417ms [Ia1eee2963c17293b] {50867/307} [DEBUG] (ioctx - L:139) <172.23.111.140:11207> (CTX=0x7f98da806240,sasl) Destroying context. Pending Writes=0, Entered=true, Socket Refcount=1
          1417ms [Ia1eee2963c17293b] {50867/307} [DEBUG] (ioctx - L:94) <172.23.111.140:11207> (CTX=0x7f98da806940,unknown) Pairing with SOCK=c0d13b2ba9964205
          1571ms [Ia1eee2963c17293b] {50867/307} [DEBUG] (ioctx - L:139) <172.23.111.140:11207> (CTX=0x7f98da806940,bc_cccp) Destroying context. Pending Writes=0, Entered=true, Socket Refcount=1
          1571ms [Ia1eee2963c17293b] {50867/307} [DEBUG] (lcbio_mgr - L:554) <172.23.111.140:11207> (HE=0x7f98d8d0e230) Placing socket back into the pool. I=0x7f98d8d0e4f0,C=0x7f98d8d0e6e0
          1571ms [Ia1eee2963c17293b] {50867/307} [ERROR] (cccp - L:220) <NOHOST:NOPORT> (CTX=0x0,) Failed to parse config
          1571ms [Ia1eee2963c17293b] {50867/307} [ERROR] (cccp - L:221) vBucket config parsing failed: /Users/jakerawsthorne/Code/cbsdk/libcouchbase/src/vbucket/vbucket.c:642 expected 'nodesExt' or 'nodes' array. Raw text in DEBUG level
          1571ms [Ia1eee2963c17293b] {50867/307} [DEBUG] (cccp - L:221) {
              "version": 1,
              "revision": 2,
              "errors": {
                  "0": {
                      "name": "SUCCESS",
                      "desc": "Success",
                      "attrs": [
                          "success"
                      ]
                  },
                  "1": {
                      "name": "KEY_ENOENT",
                      "desc": "Not Found",
                      "attrs": [
                          "item-only"
                      ]
                  },
                  "2": {
                      "name": "KEY_EEXISTS",
                      "desc": "key already exists, or CAS mismatch",
                      "attrs": [
                          "item-only"
                      ]
                  },
                  "3": {
                      "name": "E2BIG",
                      "desc": "Value is too big",
                      "attrs": [
                          "item-only",
                          "invalid-input"
                      ]
                  },
                  "4": {
                      "name": "EINVAL",
                      "desc": "Invalid packet",
                      "attrs": [
                          "internal",
                          "invalid-input"
                      ]
                  },
                  "5": {
                      "name": "NOT_STORED",
                      "desc": "Not Stored",
                      "attrs": [
                          "internal",
                          "item-only"
                      ]
                  },
                  "6": {
                      "name": "DELTA_BADVAL",
                      "desc": "Existing document not a number",
                      "attrs": [
                          "item-only",
                          "invalid-input"
                      ]
                  },
                  "7": {
                      "name": "NOT_MY_VBUCKET",
                      "desc": "Server does not know about this vBucket",
                      "attrs": [
                          "fetch-config",
                          "invalid-input"
                      ]
                  },
                  "8": {
                      "name": "NO_BUCKET",
                      "desc": "Not connected to any bucket",
                      "attrs": [
                          "conn-state-invalidated"
                      ]
                  },
                  "9": {
                      "name": "LOCKED",
                      "desc": "Requested resource is locked",
                      "attrs": [
                          "item-locked",
                          "item-only",
                          "retry-now"
                      ]
                  },
                  "1f": {
                      "name": "AUTH_STALE",
                      "desc": "Reauthentication required",
                      "attrs": [
                          "conn-state-invalidated",
                          "auth"
                      ]
                  },
                  "20": {
                      "name": "AUTH_ERROR",
                      "desc": "Authentication failed",
                      "attrs": [
                          "conn-state-invalidated",
                          "auth"
                      ]
                  },
                  "21": {
                      "name": "AUTH_CONTINUE",
                      "desc": "Continue authentication processs",
                      "attrs": [
                          "special-handling"
                      ]
                  },
                  "22": {
                      "name": "ERANGE",
                      "desc": "Invalid range requested",
                      "attrs": [
                          "invalid-input"
                      ]
                  },
                  "23": {
                      "name": "ROLLBACK",
                      "desc": "Rollback",
                      "attrs": [
                          "dcp",
                          "special-handling"
                      ]
                  },
                  "24": {
                      "name": "EACCESS",
                      "desc": "Not authorized for command",
                      "attrs": [
                          "support"
                      ]
                  },
                  "25": {
                      "name": "NOT_INITIALIZED",
                      "desc": "Server not initialized",
                      "attrs": [
                          "conn-state-invalidated"
                      ]
                  },
                  "80": {
                      "name": "UNKNOWN_FRAME_INFO",
                      "desc": "Unknown frame info identifier encountered. Maybe a newer server version knows about it",
                      "attrs": [
                          "support"
                      ]
                  },
                  "81": {
                      "name": "UNKNOWN_COMMAND",
                      "desc": "Unknown command. Maybe a newer server version knows about it",
                      "attrs": [
                          "support"
                      ]
                  },
                  "82": {
                      "name": "ENOMEM",
                      "desc": "No memory available to store item. Add memory or remove some items and try later",
                      "attrs": [
                          "temp",
                          "retry-later"
                      ]
                  },
                  "83": {
                      "name": "NOT_SUPPORTED",
                      "desc": "Command not supported with current bucket type/configuration",
                      "attrs": [
                          "support"
                      ]
                  },
                  "84": {
                      "name": "EINTERNAL",
                      "desc": "Internal error. Reconnect recommended",
                      "attrs": [
                          "internal",
                          "conn-state-invalidated"
                      ]
                  },
                  "85": {
                      "name": "EBUSY",
                      "desc": "Busy, try again",
                      "attrs": [
                          "temp",
                          "retry-now"
                      ]
                  },
                  "86": {
                      "name": "ETMPFAIL",
                      "desc": "Temporary failure. Try again",
                      "attrs": [
                          "temp",
                          "retry-now"
                      ]
                  },
                  "87": {
                      "name": "XATTR_EINVAL",
                      "desc": "Invalid extended attribute",
                      "attrs": [
                          "invalid-input"
                      ]
                  },
                  "88": {
                      "name": "UNKNOWN_COLLECTION",
                      "desc": "Operation specified an unknown collection.",
                      "attrs": [
                          "invalid-input"
                      ]
                  },
                  "89": {
                      "name": "NO_COLLECTIONS_MANIFEST",
                      "desc": "No collections manifest has been set.",
                      "attrs": [
                          "retry-later"
                      ]
                  },
                  "8a": {
                      "name": "CANNOT_APPLY_COLLECTIONS_MANIFEST",
                      "desc": "The manifest cannot applied to the bucket's vbuckets.",
                      "attrs": [
                          "invalid-input"
                      ]
                  },
                   "8b": {
                      "name": "COLLECTIONS_MANIFEST_IS_AHEAD",
                      "desc": "The specified collection's manifest uid is greater than the requested vbucket's.",
                      "attrs": [
                          "retry-later"
                      ]
                  },
                  "8c": {
                      "name": "UNKNOWN_SCOPE",
                      "desc": "Operation specified an unknown scope.",
                      "attrs": [
                          "invalid-input"
                      ]
                  },
                  "8d": {
                      "name": "DCP stream-ID invalid",
                      "desc": "Operations stream-ID usage is incorrect.",
                      "attrs": [
                          "invalid-input"
                      ]
                  },
                  "a0": {
                      "name": "DurabilityInvalidLevel",
                      "desc": "Durability level is invalid",
                      "attrs": [
                          "invalid-input"
                      ]
                  },
                  "a1": {
                      "name": "DurabilityImpossible",
                      "desc": "Durability requirements are impossible to achieve",
                      "attrs": [
                          "item-only",
                          "retry-later"
                      ]
                  },
                  "a2": {
                      "name": "SyncWriteInProgress",
                      "desc": "The requested key has a pending synchronous write",
                      "attrs": [
                          "item-only",
                          "retry-later"
                      ]
                  },
                  "a3": {
                      "name": "SyncWriteAmbiguous",
                      "desc": "The SyncWrite request has not completed in the specified time and has ambiguous result - it may Succeed or Fail; but the final value is not yet known",
                      "attrs": [
                          "item-only"
                      ]
                  },
                  "a4": {
                      "name": "SyncWriteReCommitInProgress",
                      "desc": "The requested key has a SyncWrite which is being re-committed.",
                      "attrs": [
                          "item-only",
                          "retry-later"
                      ]
                  },
                  "c0": {
                      "name": "SUBDOC_PATH_ENOENT",
                      "desc": "Subdoc: Path not found in document",
                      "attrs": [
                          "subdoc",
                          "item-only"
                      ]
                  },
                  "c1": {
                      "name": "SUBDOC_PATH_MISMATCH",
                      "desc": "Subdoc: Path and document disagree on structure",
                      "attrs": [
                          "subdoc",
                          "item-only"
                      ]
                  },
                  "c2": {
                      "name": "SUBDOC_PATH_EINVAL",
                      "desc": "Subdoc: Invalid path (bad syntax or unacceptable semantics for command",
                      "attrs": [
                          "subdoc",
                          "invalid-input"
                      ]
                  },
                  "c3": {
                      "name": "SUBDOC_PATH_E2BIG",
                      "desc": "Subdoc: Path size exceeds limit",
                      "attrs": [
                          "subdoc",
                          "invalid-input"
                      ]
                  },
                  "c4": {
                      "name": "SUBDOC_PATH_E2DEEP",
                      "desc": "Subdoc: Path is too deep to be parsed",
                      "attrs": [
                          "subdoc",
                          "invalid-input"
                      ]
                  },
                  "c5": {
                      "name": "SUBDOC_VALUE_CANTINSERT",
                      "desc": "Subdoc: Value invalid for insertion",
                      "attrs": [
                          "subdoc",
                          "invalid-input"
                      ]
                  },
                  "c6": {
                      "name": "SUBDOC_DOC_NOTJSON",
                      "desc": "Subdoc: Document not JSON",
                      "attrs": [
                          "subdoc",
                          "item-only"
                      ]
                  },
                  "c7": {
                      "name": "SUBDOC_NUM_ERANGE",
                      "desc": "Subdoc: Existing numeric value is not within range",
                      "attrs": [
                          "subdoc",
                          "item-only"
                      ]
                  },
                  "c8": {
                      "name": "SUBDOC_DELTA_EINVAL",
                      "desc": "Subdoc: Invalid value passed for delta (out of range, or not an integer",
                      "attrs": [
                          "subdoc",
                          "item-only"
                      ]
                  },
                  "c9": {
                      "name": "SUBDOC_PATH_EEXISTS",
                      "desc": "Subdoc: Path already exists",
                      "attrs": [
                          "subdoc",
                          "item-only"
                      ]
                  },
                  "ca": {
                      "name": "SUBDOC_VALUE_ETOODEEP",
                      "desc": "Subdoc: Value is too deep, or would make the document too deep",
                      "attrs": [
                          "subdoc",
                          "invalid-input",
                          "item-only"
                      ]
                  },
                  "cb": {
                      "name": "SUBDOC_INVALID_COMBO",
                      "desc": "Subdoc: Lookup and mutation commands found within single packet",
                      "attrs": [
                          "subdoc",
                          "invalid-input"
                      ]
                  },
                  "cc": {
                      "name": "SUBDOC_MULTI_PATH_FAILURE",
                      "desc": "Subdoc: Some (or all) commands failed. Inspect payload for details",
                      "attrs": [
                          "subdoc",
                          "special-handling"
                      ]
                  },
                  "cd": {
                      "name": "SUBDOC_SUCCESS_DELETED",
                      "desc": "Subdoc: Success, but the affected document was (and still is) deleted",
                      "attrs": [
                          "item-deleted",
                          "success",
                          "subdoc"
                      ]
                  },
                  "ce": {
                      "name": "SUBDOC_XATTR_INVALID_FLAG_COMBO",
                      "desc": "Subdoc: The flag combination doesn't make any sense",
                      "attrs": [
                          "subdoc",
                          "invalid-input"
                      ]
                  },
                  "cf": {
                      "name": "SUBDOC_XATTR_INVALID_KEY_COMBO",
                      "desc": "Subdoc: The key combination of the xattrs is not allowed",
                      "attrs": [
                          "subdoc",
                          "invalid-input"
                      ]
                  },
                  "d0": {
                      "name": "SUBDOC_XATTR_UNKNOWN_MACRO",
                      "desc": "Subdoc: The server don't know about the specified macro",
                      "attrs": [
                          "subdoc",
                          "invalid-input"
                      ]
                  },
                  "d1": {
                      "name": "SUBDOC_XATTR_UNKNOWN_VATTR",
                      "desc": "Subdoc: The server don't know about the specified virtual attribute",
                      "attrs": [
                          "subdoc",
                          "invalid-input"
                      ]
                  },
                  "d2": {
                      "name": "SUBDOC_XATTR_CANT_MODIFY_VATTR",
                      "desc": "Subdoc: Can't modify virtual attributes",
                      "attrs": [
                          "subdoc",
                          "invalid-input"
                      ]
                  },
                  "d3": {
                      "name": "SUBDOC_MULTI_PATH_FAILURE_DELETED",
                      "desc": "Subdoc: One or more paths in a multi-path command failed on a deleted document",
                      "attrs": [
                          "item-deleted",
                          "subdoc",
                          "special-handling"
                      ]
                  },
                  "d4": {
                      "name": "SUBDOC_INVALID_XATTR_ORDER",
                      "desc": "Subdoc: Invalid XATTR order (xattrs should come first)",
                      "attrs": [
                          "subdoc",
                          "invalid-input"
                      ]
                  }
              }
          }
           
          1572ms [Ia1eee2963c17293b] {50867/307} [INFO] (confmon - L:216) Provider 'CCCP' failed: LCB_ERR_PROTOCOL_ERROR (1050)
          1573ms [Ia1eee2963c17293b] {50867/307} [TRACE] (confmon - L:265) Maximum provider reached. Resetting index
          1573ms [Ia1eee2963c17293b] {50867/307} [ERROR] (bootstrap - L:205) Failed to bootstrap client=0x7f98d8c05be0. Error=LCB_ERR_NO_MATCHING_SERVER (1010) (Last=LCB_ERR_PROTOCOL_ERROR (1050)), Message="No more bootstrap providers remain"
          Couldn't bootstrap from cluster. Received code 0x41A (LCB_ERR_PROTOCOL_ERROR (1050))
          

          jake.rawsthorne Jake Rawsthorne added a comment - Trying the same with 6.6.3 and it tries to parse the error map as cluster config [nix-shell:~/Code/cbsdk/libcouchbase/build]$ ./bin/examples/minimal "couchbases://172.23.111.140?bootstrap_on=cccp&truststorepath=/Users/jakerawsthorne/Code/cbsdk/libcouchbase/ca.pem&ssl=on&certpath=/Users/jakerawsthorne/Code/cbsdk/libcouchbase/client.pem&keypath=/Users/jakerawsthorne/Code/cbsdk/libcouchbase/client.key" 0ms [Ia1eee2963c17293b] {50867/307} [INFO] (instance - L:521) Version=3.2.3_10_gb17efe6363, Changeset=b17efe636333a0f1db9347066749d05560de0bc9 0ms [Ia1eee2963c17293b] {50867/307} [INFO] (instance - L:522) Effective connection string: couchbases://172.23.111.140?bootstrap_on=cccp&truststorepath=/Users/jakerawsthorne/Code/cbsdk/libcouchbase/ca.pem&ssl=on&certpath=/Users/jakerawsthorne/Code/cbsdk/libcouchbase/client.pem&keypath=/Users/jakerawsthorne/Code/cbsdk/libcouchbase/client.key. Bucket=(null) 3ms [Ia1eee2963c17293b] {50867/307} [DEBUG] (SSL - L:355) Load verify locations from "/Users/jakerawsthorne/Code/cbsdk/libcouchbase/ca.pem" 3ms [Ia1eee2963c17293b] {50867/307} [DEBUG] (SSL - L:361) Authenticate with key "/Users/jakerawsthorne/Code/cbsdk/libcouchbase/client.key", cert "/Users/jakerawsthorne/Code/cbsdk/libcouchbase/client.pem" 4ms [Ia1eee2963c17293b] {50867/307} [FATAL] (SSL - L:392) LCB_TLS_LOG_KEYS was enabled during build, all TLS keys will be logged for network analysis to "/tmp/keys.txt" (https://wiki.wireshark.org/TLS). DO NOT USE THIS BUILD IN PRODUCTION 938ms [Ia1eee2963c17293b] {50867/307} [INFO] (instance - L:212) DNS SRV lookup failed: LCB_ERR_UNKNOWN_HOST (1049). Ignore this if not relying on DNS SRV records 938ms [Ia1eee2963c17293b] {50867/307} [DEBUG] (instance - L:155) Adding host 172.23.111.140:18091 to initial HTTP bootstrap list 938ms [Ia1eee2963c17293b] {50867/307} [DEBUG] (instance - L:155) Adding host 172.23.111.140:11207 to initial CCCP bootstrap list 938ms [Ia1eee2963c17293b] {50867/307} [TRACE] (instance - L:193) Bootstrap hosts loaded (cccp:1, http:1) 938ms [Ia1eee2963c17293b] {50867/307} [INFO] (bootstrap - L:277) Requested network configuration: heuristic 938ms [Ia1eee2963c17293b] {50867/307} [DEBUG] (confmon - L:94) Preparing providers (this may be called multiple times) 938ms [Ia1eee2963c17293b] {50867/307} [DEBUG] (confmon - L:100) Provider CCCP is ENABLED 938ms [Ia1eee2963c17293b] {50867/307} [TRACE] (confmon - L:319) Refreshing current cluster map (bucket: (null)) 938ms [Ia1eee2963c17293b] {50867/307} [INFO] (cccp - L:176) Requesting connection to node 172.23.111.140:11207 for CCCP configuration 938ms [Ia1eee2963c17293b] {50867/307} [DEBUG] (lcbio_mgr - L:501) <172.23.111.140:11207> (HE=0x7f98d8d0e230) Creating new connection because none are available in the pool 938ms [Ia1eee2963c17293b] {50867/307} [TRACE] (lcbio_mgr - L:413) <172.23.111.140:11207> (HE=0x7f98d8d0e230) New pool entry: I=0x7f98d8d0e4f0 938ms [Ia1eee2963c17293b] {50867/307} [INFO] (connection - L:497) <172.23.111.140:11207> (SOCK=c0d13b2ba9964205) Starting. Timeout=2000000us 938ms [Ia1eee2963c17293b] {50867/307} [DEBUG] (connection - L:262) <172.23.111.140:11207> (SOCK=c0d13b2ba9964205) Created new socket with FD=4 938ms [Ia1eee2963c17293b] {50867/307} [TRACE] (connection - L:362) <172.23.111.140:11207> (SOCK=c0d13b2ba9964205) Scheduling I/O watcher for asynchronous connection completion. 938ms [Ia1eee2963c17293b] {50867/307} [TRACE] (confmon - L:305) Attempting to retrieve cluster map via CCCP 1091ms [Ia1eee2963c17293b] {50867/307} [INFO] (connection - L:159) <172.23.111.140:11207> (SOCK=c0d13b2ba9964205) Connected established 1091ms [Ia1eee2963c17293b] {50867/307} [DEBUG] (connection - L:106) <172.23.111.140:11207> (SOCK=c0d13b2ba9964205) Successfully set TCP_NODELAY 1091ms [Ia1eee2963c17293b] {50867/307} [DEBUG] (connection - L:106) <172.23.111.140:11207> (SOCK=c0d13b2ba9964205) Successfully set TCP_KEEPALIVE 1091ms [Ia1eee2963c17293b] {50867/307} [DEBUG] (lcbio_mgr - L:369) <172.23.111.140:11207> (HE=0x7f98d8d0e230) Received result for I=0x7f98d8d0e4f0,C=0x0; E=0x0 1091ms [Ia1eee2963c17293b] {50867/307} [DEBUG] (lcbio_mgr - L:329) <172.23.111.140:11207> (HE=0x7f98d8d0e230) Assigning R=0x7f98d8d0e3a0 SOCKET=0x7f98d8d0e6e0 1091ms [Ia1eee2963c17293b] {50867/307} [DEBUG] (ioctx - L:94) <172.23.111.140:11207> (CTX=0x7f98da806240,unknown) Pairing with SOCK=c0d13b2ba9964205 1091ms [Ia1eee2963c17293b] {50867/307} [DEBUG] (negotiation - L:470) <172.23.111.140:11207> (CTX=0x7f98da806240,sasl,SASLREQ=0x7f98db009200) HELO identificator: {"a":"libcouchbase/3.2.3_10_gb17efe6363 (Darwin-19.6.0; x86_64; Clang 7.1.0)","i":"a1eee2963c17293b/c0d13b2ba9964205"}, features: 0x02 (TLS), 0x06 (XATTR), 0x0b (JSON), 0x08 (Select bucket), 0x07 (XERROR), 0x03 (TCP nodelay), 0x0a (Snappy), 0x04 (Mutation seqno), 0x0f (Tracing), 0x12 (Collections), 0x0e (Unordered execution), 0x17 (Create as Deleted), 0x14 (Preserve Expiry) 1091ms [Ia1eee2963c17293b] {50867/307} [TRACE] (SSL - L:240) <172.23.111.140:11207> sock=0x7f98d8d0e6e0: ST(0x10). before SSL initialization. R(0x1) unknown (unknown) 1258ms [Ia1eee2963c17293b] {50867/307} [TRACE] (SSL - L:240) <172.23.111.140:11207> sock=0x7f98d8d0e6e0: ST(0x20). SSL negotiation finished successfully. R(0x1) unknown (unknown) 1258ms [Ia1eee2963c17293b] {50867/307} [DEBUG] (SSL - L:245) sock=0x7f98d8d0e6e0. Using SSL version TLSv1.3. Cipher=TLS_AES_256_GCM_SHA384 1417ms [Ia1eee2963c17293b] {50867/307} [DEBUG] (negotiation - L:501) <172.23.111.140:11207> (CTX=0x7f98da806240,sasl,SASLREQ=0x7f98db009200) Server supports features: 0x03 (TCP nodelay), 0x04 (Mutation seqno), 0x06 (XATTR), 0x07 (XERROR), 0x08 (Select bucket), 0x0a (Snappy), 0x0b (JSON), 0x0e (Unordered execution), 0x0f (Tracing), 0x17 (Create as Deleted) 1417ms [Ia1eee2963c17293b] {50867/307} [DEBUG] (ioctx - L:139) <172.23.111.140:11207> (CTX=0x7f98da806240,sasl) Destroying context. Pending Writes=0, Entered=true, Socket Refcount=1 1417ms [Ia1eee2963c17293b] {50867/307} [DEBUG] (ioctx - L:94) <172.23.111.140:11207> (CTX=0x7f98da806940,unknown) Pairing with SOCK=c0d13b2ba9964205 1571ms [Ia1eee2963c17293b] {50867/307} [DEBUG] (ioctx - L:139) <172.23.111.140:11207> (CTX=0x7f98da806940,bc_cccp) Destroying context. Pending Writes=0, Entered=true, Socket Refcount=1 1571ms [Ia1eee2963c17293b] {50867/307} [DEBUG] (lcbio_mgr - L:554) <172.23.111.140:11207> (HE=0x7f98d8d0e230) Placing socket back into the pool. I=0x7f98d8d0e4f0,C=0x7f98d8d0e6e0 1571ms [Ia1eee2963c17293b] {50867/307} [ERROR] (cccp - L:220) <NOHOST:NOPORT> (CTX=0x0,) Failed to parse config 1571ms [Ia1eee2963c17293b] {50867/307} [ERROR] (cccp - L:221) vBucket config parsing failed: /Users/jakerawsthorne/Code/cbsdk/libcouchbase/src/vbucket/vbucket.c:642 expected 'nodesExt' or 'nodes' array. Raw text in DEBUG level 1571ms [Ia1eee2963c17293b] {50867/307} [DEBUG] (cccp - L:221) { "version": 1, "revision": 2, "errors": { "0": { "name": "SUCCESS", "desc": "Success", "attrs": [ "success" ] }, "1": { "name": "KEY_ENOENT", "desc": "Not Found", "attrs": [ "item-only" ] }, "2": { "name": "KEY_EEXISTS", "desc": "key already exists, or CAS mismatch", "attrs": [ "item-only" ] }, "3": { "name": "E2BIG", "desc": "Value is too big", "attrs": [ "item-only", "invalid-input" ] }, "4": { "name": "EINVAL", "desc": "Invalid packet", "attrs": [ "internal", "invalid-input" ] }, "5": { "name": "NOT_STORED", "desc": "Not Stored", "attrs": [ "internal", "item-only" ] }, "6": { "name": "DELTA_BADVAL", "desc": "Existing document not a number", "attrs": [ "item-only", "invalid-input" ] }, "7": { "name": "NOT_MY_VBUCKET", "desc": "Server does not know about this vBucket", "attrs": [ "fetch-config", "invalid-input" ] }, "8": { "name": "NO_BUCKET", "desc": "Not connected to any bucket", "attrs": [ "conn-state-invalidated" ] }, "9": { "name": "LOCKED", "desc": "Requested resource is locked", "attrs": [ "item-locked", "item-only", "retry-now" ] }, "1f": { "name": "AUTH_STALE", "desc": "Reauthentication required", "attrs": [ "conn-state-invalidated", "auth" ] }, "20": { "name": "AUTH_ERROR", "desc": "Authentication failed", "attrs": [ "conn-state-invalidated", "auth" ] }, "21": { "name": "AUTH_CONTINUE", "desc": "Continue authentication processs", "attrs": [ "special-handling" ] }, "22": { "name": "ERANGE", "desc": "Invalid range requested", "attrs": [ "invalid-input" ] }, "23": { "name": "ROLLBACK", "desc": "Rollback", "attrs": [ "dcp", "special-handling" ] }, "24": { "name": "EACCESS", "desc": "Not authorized for command", "attrs": [ "support" ] }, "25": { "name": "NOT_INITIALIZED", "desc": "Server not initialized", "attrs": [ "conn-state-invalidated" ] }, "80": { "name": "UNKNOWN_FRAME_INFO", "desc": "Unknown frame info identifier encountered. Maybe a newer server version knows about it", "attrs": [ "support" ] }, "81": { "name": "UNKNOWN_COMMAND", "desc": "Unknown command. Maybe a newer server version knows about it", "attrs": [ "support" ] }, "82": { "name": "ENOMEM", "desc": "No memory available to store item. Add memory or remove some items and try later", "attrs": [ "temp", "retry-later" ] }, "83": { "name": "NOT_SUPPORTED", "desc": "Command not supported with current bucket type/configuration", "attrs": [ "support" ] }, "84": { "name": "EINTERNAL", "desc": "Internal error. Reconnect recommended", "attrs": [ "internal", "conn-state-invalidated" ] }, "85": { "name": "EBUSY", "desc": "Busy, try again", "attrs": [ "temp", "retry-now" ] }, "86": { "name": "ETMPFAIL", "desc": "Temporary failure. Try again", "attrs": [ "temp", "retry-now" ] }, "87": { "name": "XATTR_EINVAL", "desc": "Invalid extended attribute", "attrs": [ "invalid-input" ] }, "88": { "name": "UNKNOWN_COLLECTION", "desc": "Operation specified an unknown collection.", "attrs": [ "invalid-input" ] }, "89": { "name": "NO_COLLECTIONS_MANIFEST", "desc": "No collections manifest has been set.", "attrs": [ "retry-later" ] }, "8a": { "name": "CANNOT_APPLY_COLLECTIONS_MANIFEST", "desc": "The manifest cannot applied to the bucket's vbuckets.", "attrs": [ "invalid-input" ] }, "8b": { "name": "COLLECTIONS_MANIFEST_IS_AHEAD", "desc": "The specified collection's manifest uid is greater than the requested vbucket's.", "attrs": [ "retry-later" ] }, "8c": { "name": "UNKNOWN_SCOPE", "desc": "Operation specified an unknown scope.", "attrs": [ "invalid-input" ] }, "8d": { "name": "DCP stream-ID invalid", "desc": "Operations stream-ID usage is incorrect.", "attrs": [ "invalid-input" ] }, "a0": { "name": "DurabilityInvalidLevel", "desc": "Durability level is invalid", "attrs": [ "invalid-input" ] }, "a1": { "name": "DurabilityImpossible", "desc": "Durability requirements are impossible to achieve", "attrs": [ "item-only", "retry-later" ] }, "a2": { "name": "SyncWriteInProgress", "desc": "The requested key has a pending synchronous write", "attrs": [ "item-only", "retry-later" ] }, "a3": { "name": "SyncWriteAmbiguous", "desc": "The SyncWrite request has not completed in the specified time and has ambiguous result - it may Succeed or Fail; but the final value is not yet known", "attrs": [ "item-only" ] }, "a4": { "name": "SyncWriteReCommitInProgress", "desc": "The requested key has a SyncWrite which is being re-committed.", "attrs": [ "item-only", "retry-later" ] }, "c0": { "name": "SUBDOC_PATH_ENOENT", "desc": "Subdoc: Path not found in document", "attrs": [ "subdoc", "item-only" ] }, "c1": { "name": "SUBDOC_PATH_MISMATCH", "desc": "Subdoc: Path and document disagree on structure", "attrs": [ "subdoc", "item-only" ] }, "c2": { "name": "SUBDOC_PATH_EINVAL", "desc": "Subdoc: Invalid path (bad syntax or unacceptable semantics for command", "attrs": [ "subdoc", "invalid-input" ] }, "c3": { "name": "SUBDOC_PATH_E2BIG", "desc": "Subdoc: Path size exceeds limit", "attrs": [ "subdoc", "invalid-input" ] }, "c4": { "name": "SUBDOC_PATH_E2DEEP", "desc": "Subdoc: Path is too deep to be parsed", "attrs": [ "subdoc", "invalid-input" ] }, "c5": { "name": "SUBDOC_VALUE_CANTINSERT", "desc": "Subdoc: Value invalid for insertion", "attrs": [ "subdoc", "invalid-input" ] }, "c6": { "name": "SUBDOC_DOC_NOTJSON", "desc": "Subdoc: Document not JSON", "attrs": [ "subdoc", "item-only" ] }, "c7": { "name": "SUBDOC_NUM_ERANGE", "desc": "Subdoc: Existing numeric value is not within range", "attrs": [ "subdoc", "item-only" ] }, "c8": { "name": "SUBDOC_DELTA_EINVAL", "desc": "Subdoc: Invalid value passed for delta (out of range, or not an integer", "attrs": [ "subdoc", "item-only" ] }, "c9": { "name": "SUBDOC_PATH_EEXISTS", "desc": "Subdoc: Path already exists", "attrs": [ "subdoc", "item-only" ] }, "ca": { "name": "SUBDOC_VALUE_ETOODEEP", "desc": "Subdoc: Value is too deep, or would make the document too deep", "attrs": [ "subdoc", "invalid-input", "item-only" ] }, "cb": { "name": "SUBDOC_INVALID_COMBO", "desc": "Subdoc: Lookup and mutation commands found within single packet", "attrs": [ "subdoc", "invalid-input" ] }, "cc": { "name": "SUBDOC_MULTI_PATH_FAILURE", "desc": "Subdoc: Some (or all) commands failed. Inspect payload for details", "attrs": [ "subdoc", "special-handling" ] }, "cd": { "name": "SUBDOC_SUCCESS_DELETED", "desc": "Subdoc: Success, but the affected document was (and still is) deleted", "attrs": [ "item-deleted", "success", "subdoc" ] }, "ce": { "name": "SUBDOC_XATTR_INVALID_FLAG_COMBO", "desc": "Subdoc: The flag combination doesn't make any sense", "attrs": [ "subdoc", "invalid-input" ] }, "cf": { "name": "SUBDOC_XATTR_INVALID_KEY_COMBO", "desc": "Subdoc: The key combination of the xattrs is not allowed", "attrs": [ "subdoc", "invalid-input" ] }, "d0": { "name": "SUBDOC_XATTR_UNKNOWN_MACRO", "desc": "Subdoc: The server don't know about the specified macro", "attrs": [ "subdoc", "invalid-input" ] }, "d1": { "name": "SUBDOC_XATTR_UNKNOWN_VATTR", "desc": "Subdoc: The server don't know about the specified virtual attribute", "attrs": [ "subdoc", "invalid-input" ] }, "d2": { "name": "SUBDOC_XATTR_CANT_MODIFY_VATTR", "desc": "Subdoc: Can't modify virtual attributes", "attrs": [ "subdoc", "invalid-input" ] }, "d3": { "name": "SUBDOC_MULTI_PATH_FAILURE_DELETED", "desc": "Subdoc: One or more paths in a multi-path command failed on a deleted document", "attrs": [ "item-deleted", "subdoc", "special-handling" ] }, "d4": { "name": "SUBDOC_INVALID_XATTR_ORDER", "desc": "Subdoc: Invalid XATTR order (xattrs should come first)", "attrs": [ "subdoc", "invalid-input" ] } } }   1572ms [Ia1eee2963c17293b] {50867/307} [INFO] (confmon - L:216) Provider 'CCCP' failed: LCB_ERR_PROTOCOL_ERROR (1050) 1573ms [Ia1eee2963c17293b] {50867/307} [TRACE] (confmon - L:265) Maximum provider reached. Resetting index 1573ms [Ia1eee2963c17293b] {50867/307} [ERROR] (bootstrap - L:205) Failed to bootstrap client=0x7f98d8c05be0. Error=LCB_ERR_NO_MATCHING_SERVER (1010) (Last=LCB_ERR_PROTOCOL_ERROR (1050)), Message="No more bootstrap providers remain" Couldn't bootstrap from cluster. Received code 0x41A (LCB_ERR_PROTOCOL_ERROR (1050))

          Build couchbase-server-7.1.0-1814 contains libcouchbase commit 16463b3 with commit message:
          CCBC-1521: fix bootstrap process when client cert is used

          build-team Couchbase Build Team added a comment - Build couchbase-server-7.1.0-1814 contains libcouchbase commit 16463b3 with commit message: CCBC-1521 : fix bootstrap process when client cert is used

          Build couchbase-server-7.1.0-1814 contains libcouchbase commit b17efe6 with commit message:
          CCBC-1509: record more info in TLS log callback

          build-team Couchbase Build Team added a comment - Build couchbase-server-7.1.0-1814 contains libcouchbase commit b17efe6 with commit message: CCBC-1509 : record more info in TLS log callback

          Build couchbase-server-7.1.0-2277 contains libcouchbase commit 3f49ca2 with commit message:
          CCBC-1521: fix bootstrap process when client cert is used and error map is supported

          build-team Couchbase Build Team added a comment - Build couchbase-server-7.1.0-2277 contains libcouchbase commit 3f49ca2 with commit message: CCBC-1521 : fix bootstrap process when client cert is used and error map is supported

          People

            avsej Sergey Avseyev
            jake.rawsthorne#1 Jake Rawsthorne [X] (Inactive)
            Votes:
            0 Vote for this issue
            Watchers:
            5 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved:

              Gerrit Reviews

                There are no open Gerrit changes

                PagerDuty