Uploaded image for project: 'Couchbase Server'
  1. Couchbase Server
  2. MB-40347

Connect link failing after changing link encryption from none to full.

    XMLWordPrintable

    Details

      Description

      Steps to reproduce - 

      1. create 2 cluster, 1 local analytics cluster, 1 remote KV cluster
      2. Load sample bucket in remote KV cluster
      3. create link to remote cluster on local cluster with encryption set as none.
      4. create dataset using link in step 3
      5. disconnect link and alter link encryption to full and use root certificate with username and password
      6. try connecting link.
      7. below error is raised.

      [
        {
          "code": 22001,
          "msg": "Connect link failed {\"Default.newLink.travel-sample\" : \"Internal error\"}",
          "query_from_user": "connect link newLink;"
        }
      ]
      

        Attachments

          Issue Links

          No reviews matched the request. Check your Options in the drop-down menu of this sections header.

            Activity

            Hide
            michael.blow Michael Blow added a comment -

            This is not a regression- on alter link failure the link details should not updated, but currently are.

            Show
            michael.blow Michael Blow added a comment - This is not a regression- on alter link failure the link details should not updated, but currently are.
            Hide
            build-team Couchbase Build Team added a comment -

            Build couchbase-server-6.6.0-7871 contains cbas-core commit 728d9fc with commit message:
            MB-40347: don't apply alter link details on failure

            Show
            build-team Couchbase Build Team added a comment - Build couchbase-server-6.6.0-7871 contains cbas-core commit 728d9fc with commit message: MB-40347 : don't apply alter link details on failure
            Hide
            umang.agrawal Umang added a comment -

            verified with couchbase server build 6.6.0-7878

            Show
            umang.agrawal Umang added a comment - verified with couchbase server build 6.6.0-7878
            Hide
            build-team Couchbase Build Team added a comment -

            Build couchbase-server-7.0.0-2640 contains cbas-core commit 728d9fc with commit message:
            MB-40347: don't apply alter link details on failure

            Show
            build-team Couchbase Build Team added a comment - Build couchbase-server-7.0.0-2640 contains cbas-core commit 728d9fc with commit message: MB-40347 : don't apply alter link details on failure
            Hide
            umang.agrawal Umang added a comment -

            facing same issue again with build 6.6.0-7883

            Show
            umang.agrawal Umang added a comment - facing same issue again with build 6.6.0-7883
            Hide
            michael.blow Michael Blow added a comment -

            these logs don't at all appear related to this issue- what are the repro steps and what is the complaint? these logs indicate that an ALTER link failed due to incorrect client certificate being supplied, probably the intermediate certificate isn't being appended to what is supplied, i see only one certificate being supplied to the REST api.

            400 Bad Request, message=CBAS0025: Link authentication failed: javax.net.ssl.SSLHandshakeException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
            

            Connect link isn't failing, and this isn't a connection be updated to full w/ credentials as indicated in the description.

            Show
            michael.blow Michael Blow added a comment - these logs don't at all appear related to this issue- what are the repro steps and what is the complaint? these logs indicate that an ALTER link failed due to incorrect client certificate being supplied, probably the intermediate certificate isn't being appended to what is supplied, i see only one certificate being supplied to the REST api. 400 Bad Request, message=CBAS0025: Link authentication failed: javax.net.ssl.SSLHandshakeException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target Connect link isn't failing, and this isn't a connection be updated to full w/ credentials as indicated in the description.
            Hide
            michael.blow Michael Blow added a comment -

            This looks like the same issue (and root cause) of MB-40358.

            Show
            michael.blow Michael Blow added a comment - This looks like the same issue (and root cause) of MB-40358 .
            Hide
            umang.agrawal Umang added a comment -

            Confused this issue with MB-40358

            Closing this issue and will be reopening the correct one.

            Show
            umang.agrawal Umang added a comment - Confused this issue with  MB-40358 .  Closing this issue and will be reopening the correct one.
            Hide
            build-team Couchbase Build Team added a comment -

            Build couchbase-server-6.6.2-9599 contains cbas-core commit 728d9fc with commit message:
            MB-40347: don't apply alter link details on failure

            Show
            build-team Couchbase Build Team added a comment - Build couchbase-server-6.6.2-9599 contains cbas-core commit 728d9fc with commit message: MB-40347 : don't apply alter link details on failure

              People

              Assignee:
              umang.agrawal Umang
              Reporter:
              umang.agrawal Umang
              Votes:
              0 Vote for this issue
              Watchers:
              4 Start watching this issue

                Dates

                Created:
                Updated:
                Resolved:

                  Gerrit Reviews

                  There are no open Gerrit changes

                    PagerDuty