Uploaded image for project: 'Couchbase Server'
  1. Couchbase Server
  2. MB-48291

[Enforce-TLS] FTS not honouring strict level of n2n

    XMLWordPrintable

Details

    Description

      My ns-server specific tests are failing as cbft seems to be listening on *:8094 even after enforcing TLS.

      Simple way to reproduce this:
      1. Start a 1 node cluster with kv service (.215)
      2. Add another node with all services (.217)
      3. Disable AF and enable n2n encryption to level "strict"
      4. Check if FTS obeyed TLS:

      [root@localhost logs]# ss -4anpe | grep "8094" | grep "LISTEN" 
      tcp    LISTEN     0      128       *:18094                 *:*                   users:(("cbft",pid=124186,fd=18)) uid:996 ino:5237690 sk:ffff97a55b695d00 <->
      tcp    LISTEN     0      128       *:8094                  *:*                   users:(("cbft",pid=124186,fd=16)) uid:996 ino:5237688 sk:ffff97a55b696c80 <->
      [root@localhost logs]# 

      actual:
      *:8094
      expected:
      127.0.0.1:8094

      Attachments

        Issue Links

          For Gerrit Dashboard: MB-48291
          # Subject Branch Project Status CR V

          Activity

            People

              abhinav Abhi Dangeti
              sumedh.basarkod Sumedh Basarkod (Inactive)
              Votes:
              0 Vote for this issue
              Watchers:
              5 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved:

                Gerrit Reviews

                  There are no open Gerrit changes

                  PagerDuty