Uploaded image for project: 'Couchbase Server'
  1. Couchbase Server
  2. MB-48278

Non-SSL ports advertised by cluster config when enforce encryption set to strict

    XMLWordPrintable

Details

    • Bug
    • Resolution: Unresolved
    • Minor
    • backlog
    • 7.0.2
    • ns_server
    • None
    • Triaged
    • 1
    • Unknown

    Description

      I'm not sure that this is a bug or intentional for some sort of compatibility.

      When testing strict mode with the Go SDK against 7.0.2-6631 I'm seeing that the cluster config returned to us during CCCP contains both SSL and non SSL ports in the nodesExt field. I've done some testing and the non SSL ports are not actually listening, as expected. I've included a snippet of nodesExt below.

      If this is indeed a bug then it may have impact for products like query transactions due to a bug in gocbcore.
       

      {{"nodesExt":[\{"services":{"capi":8092,"capiSSL":18092,"cbas":8095,"cbasSSL":18095,"fts":8094,"ftsGRPC":9130,"ftsGRPCSSL":19130,"ftsSSL":18094,"indexAdmin":9100,"indexHttp":9102,"indexHttps":19102,"indexScan":9101,"indexStreamCatchup":9104,"indexStreamInit":9103,"indexStreamMaint":9105,"kv":11210,"kvSSL":11207,"mgmt":8091,"mgmtSSL":18091,"n1ql":8093,"n1qlSSL":18093,"projector":9999},"thisNode":true}]}}
      

      Attachments

        No reviews matched the request. Check your Options in the drop-down menu of this sections header.

        Activity

          People

            istvan.orban Istvan Orban
            charles.dixon Charles Dixon
            Votes:
            0 Vote for this issue
            Watchers:
            10 Start watching this issue

            Dates

              Created:
              Updated:

              Gerrit Reviews

                There are no open Gerrit changes

                PagerDuty