Uploaded image for project: 'Couchbase Server'
  1. Couchbase Server
  2. MB-34452

indexer ports are not switched to TLS when node to node encryption is turned on

    XMLWordPrintable

Details

    • Bug
    • Resolution: User Error
    • Critical
    • 6.5.0
    • 6.5.0
    • secondary-index
    • 6.5.0-3392
    • Untriaged
    • Centos 64-bit
    • No

    Description

      1. Create a 2 node cluster KV on node1 and n1ql + indexer on Node2
      2. run the following on both the nodes:
      curl -v -X POST -d 'external=inet_tcp,inet_tls' http://localhost:8091/node/controller/distProtocols -u Administrator:password
      3. Execute the following on both the nodes:
      curl -X POST -d 'afamily=ipv4' -d 'nodeEncryption=on' -u Administrator:password http://localhost:8091/node/controller/setupNetConfig
      4. Run testssl.sh on following ports:
      Defined by ns-server. Port 9104 is not used.

      %% index service ports
      ?define_port(indexer_admin_port, indexAdmin, index, 9100),
      ?define_port(indexer_scan_port, indexScan, index, 9101),
      ?define_port(indexer_http_port, indexHttp, index, 9102),
      ?define_port(indexer_stinit_port, indexStreamInit, index, 9103),
      ?define_port(indexer_stcatchup_port, indexStreamCatchup, index, 9104),
      ?define_port(indexer_stmaint_port, indexStreamMaint, index, 9105),

      Project
      %% projector ports - depending on the cluster encryption setting,
      %% projector hosts either an SSL or non-SSL endpoint.
      %% Hence assigning the same port for both types.
      ?define_port(projector_port, projector, kv, 9999),
      ?define_port(projector_ssl_port, projector, kv, 9999, secure),

      Test respond with - doesn't seem to be a TLS/SSL enabled server.

      Attachments

        No reviews matched the request. Check your Options in the drop-down menu of this sections header.

        Activity

          People

            ritam.sharma Ritam Sharma
            ritam.sharma Ritam Sharma
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved:

              Gerrit Reviews

                There are no open Gerrit changes

                PagerDuty