Uploaded image for project: 'Couchbase Server'
  1. Couchbase Server
  2. MB-48648

XDCR - SecuritySvc could miss parsing certificates

    XMLWordPrintable

Details

    • Bug
    • Resolution: Fixed
    • Major
    • 7.1.0
    • 7.1.0
    • XDCR
    • None
    • Untriaged
    • 1
    • Yes

    Description

      With changes due to MB-48377, it assumes that the cbauth.CFG_CHANGE_CLUSTER_ENCRYPTION (2) happens before cbauth.CFG_CHANGE_CERTS_TLSCONFIG (1), but this assumption is incorrect, as evident from logs:

      2021-09-28T14:26:24.965-07:00 INFO GOXDCR.SecuritySvc: Received security change notification. code 1
      2021-09-28T14:28:04.593-07:00 INFO GOXDCR.SecuritySvc: Received security change notification. code 2
      

      As a result, the security service will not store a certificate correctly and it'll return empty data back to consumers that ask for it.

      Attachments

        Issue Links

          No reviews matched the request. Check your Options in the drop-down menu of this sections header.

          Activity

            People

              lilei.chen Lilei Chen (Inactive)
              neil.huang Neil Huang
              Votes:
              0 Vote for this issue
              Watchers:
              1 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved:

                Gerrit Reviews

                  There are no open Gerrit changes

                  PagerDuty