Uploaded image for project: 'Couchbase Server'
  1. Couchbase Server
  2. MB-49324

TLS handshake error : tls: failed to sign handshake: crypto/rsa: key size too small for PSS signature

    XMLWordPrintable

Details

    • Bug
    • Resolution: Unresolved
    • Major
    • backlog
    • 7.1.0
    • ns_server
    • None
    • Untriaged
    • 1
    • Unknown

    Description

      Build: 7.1.0 build 1617

      • Cluster with 2 nodes - kv+query+index and search
      • Generate Root CA and load node certificates for both the nodes
      • Enable node to node encryption level strict
      • Create a default bucket and load some docs.
      • Try creating fts index.

      Although we get response saying, index created, i guess index build is failing and search tab in UI shows "Unexpected server error"

      In logs we see errors:

      2021/11/02 16:37:02 http: TLS handshake error from 172.23.97.211:49512: tls: failed to sign handshake: crypto/rsa: key size too small for PSS signature
      2021/11/02 16:37:34 http: TLS handshake error from 172.23.97.211:49716: tls: failed to sign handshake: crypto/rsa: key size too small for PSS signature
      2021/11/02 16:37:34 http: TLS handshake error from 172.23.97.211:49718: tls: failed to sign handshake: crypto/rsa: key size too small for PSS signature
      2021/11/02 16:37:48 http: TLS handshake error from 10.100.255.139:50925: remote error: tls: unknown certificate
      2021/11/02 16:54:37 http: TLS handshake error from 172.23.97.211:53936: tls: failed to sign handshake: crypto/rsa: key size too small for PSS signature
      2021/11/02 16:54:37 http: TLS handshake error from 172.23.97.211:53938: tls: failed to sign handshake: crypto/rsa: key size too small for PSS signature
      

      Logs:

      https://cb-jira.s3.us-east-2.amazonaws.com/logs/cert/collectinfo-2021-11-02T235755-ns_1%40172.23.97.211.zip
      https://cb-jira.s3.us-east-2.amazonaws.com/logs/cert/collectinfo-2021-11-02T235755-ns_1%40172.23.97.212.zip

      Attachments

        Issue Links

          No reviews matched the request. Check your Options in the drop-down menu of this sections header.

          Activity

            People

              istvan.orban Istvan Orban
              girish.benakappa Girish Benakappa
              Votes:
              0 Vote for this issue
              Watchers:
              6 Start watching this issue

              Dates

                Created:
                Updated:

                Gerrit Reviews

                  There are no open Gerrit changes

                  PagerDuty