Uploaded image for project: 'Couchbase Server'
  1. Couchbase Server
  2. MB-40347

Connect link failing after changing link encryption from none to full.

    XMLWordPrintable

Details

    Description

      Steps to reproduce - 

      1. create 2 cluster, 1 local analytics cluster, 1 remote KV cluster
      2. Load sample bucket in remote KV cluster
      3. create link to remote cluster on local cluster with encryption set as none.
      4. create dataset using link in step 3
      5. disconnect link and alter link encryption to full and use root certificate with username and password
      6. try connecting link.
      7. below error is raised.

      [
        {
          "code": 22001,
          "msg": "Connect link failed {\"Default.newLink.travel-sample\" : \"Internal error\"}",
          "query_from_user": "connect link newLink;"
        }
      ]
      

      Attachments

        Issue Links

          No reviews matched the request. Check your Options in the drop-down menu of this sections header.

          Activity

            Build couchbase-server-6.6.2-9599 contains cbas-core commit 728d9fc with commit message:
            MB-40347: don't apply alter link details on failure

            build-team Couchbase Build Team added a comment - Build couchbase-server-6.6.2-9599 contains cbas-core commit 728d9fc with commit message: MB-40347 : don't apply alter link details on failure
            umang.agrawal Umang added a comment -

            Confused this issue with MB-40358

            Closing this issue and will be reopening the correct one.

            umang.agrawal Umang added a comment - Confused this issue with  MB-40358 .  Closing this issue and will be reopening the correct one.

            This looks like the same issue (and root cause) of MB-40358.

            michael.blow Michael Blow added a comment - This looks like the same issue (and root cause) of MB-40358 .

            these logs don't at all appear related to this issue- what are the repro steps and what is the complaint? these logs indicate that an ALTER link failed due to incorrect client certificate being supplied, probably the intermediate certificate isn't being appended to what is supplied, i see only one certificate being supplied to the REST api.

            400 Bad Request, message=CBAS0025: Link authentication failed: javax.net.ssl.SSLHandshakeException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
            

            Connect link isn't failing, and this isn't a connection be updated to full w/ credentials as indicated in the description.

            michael.blow Michael Blow added a comment - these logs don't at all appear related to this issue- what are the repro steps and what is the complaint? these logs indicate that an ALTER link failed due to incorrect client certificate being supplied, probably the intermediate certificate isn't being appended to what is supplied, i see only one certificate being supplied to the REST api. 400 Bad Request, message=CBAS0025: Link authentication failed: javax.net.ssl.SSLHandshakeException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target Connect link isn't failing, and this isn't a connection be updated to full w/ credentials as indicated in the description.
            umang.agrawal Umang added a comment -

            facing same issue again with build 6.6.0-7883

            umang.agrawal Umang added a comment - facing same issue again with build 6.6.0-7883

            People

              umang.agrawal Umang
              umang.agrawal Umang
              Votes:
              0 Vote for this issue
              Watchers:
              4 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved:

                Gerrit Reviews

                  There are no open Gerrit changes

                  PagerDuty