Uploaded image for project: 'Couchbase Server'
  1. Couchbase Server
  2. MB-49891

[XDCR] Unable to add remote ref with multiple CA

    XMLWordPrintable

Details

    • Bug
    • Resolution: User Error
    • Critical
    • 7.1.0
    • 7.1.0
    • XDCR
    • Untriaged
    • 1
    • Unknown

    Description

      Configured 2 clusters with multiple CA..seeing this error while adding second cluster as remote:

      error: 400 reason: unknown b'{"_":"Failed to parse given certificates. Certificates must be one or more, PEM-encoded x509 certificate and nothing more."}\n' auth: Administrator:password
      

      I am passing the certs from pools/default/trustedCAs.

      2021-12-03 13:02:17 | ERROR | MainProcess | test_thread | [rest_client._http_request]  POST https://172.23.106.121:18091/pools/default/remoteClusters body: hostname=172.23.104.107%3A8091&username=Administrator&password=password&name=remote_cluster_C1-C2&demandEncryption=on&certificate=%5B%7B%22warnings%22%3A%5B%7B%22name%22%3A%22self_signed%22%2C%22message%22%3A%22Out-of-the-box+certificates+are+self-signed.+To+further+secure+your+system%2C+you+must+create+new+X.509+certificates+signed+by+a+trusted+CA.%22%2C%22severity%22%3A2%2C%22severityName%22%3A%22minimal%22%7D%5D%2C%22id%22%3A2%2C%22loadTimestamp%22%3A%222021-12-03T20%3A56%3A49.000Z%22%2C%22subject%22%3A%22CN%3DCouchbase+Server+77279f98%22%2C%22notBefore%22%3A%222013-01-01T00%3A00%3A00.000Z%22%2C%22notAfter%22%3A%222049-12-31T23%3A59%3A59.000Z%22%2C%22type%22%3A%22generated%22%2C%22pem%22%3A%22-----BEGIN+CERTIFICATE-----%5CnMIIDAjCCAeqgAwIBAgIIFr1aMd2FXKgwDQYJKoZIhvcNAQELBQAwJDEiMCAGA1UE%5CnAxMZQ291Y2hiYXNlIFNlcnZlciA3NzI3OWY5ODAeFw0xMzAxMDEwMDAwMDBaFw00%5CnOTEyMzEyMzU5NTlaMCQxIjAgBgNVBAMTGUNvdWNoYmFzZSBTZXJ2ZXIgNzcyNzlm%5CnOTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9s3h6FLmfZ54omlt5%5CnTDbYjJhkpPK5rdToMkqH9gXaLcynX%2BxqXubK79GWg3Zhi8k45us11P7tTgKHBmIQ%5CnuHcRdZWRylKkLxli%2Bss1w9zVn0n%2B%2FyP1lWNvVOTGI7kZlBloJiQIeRf%2Fl%2Fr0T0Kl%5CnOWLIXrNSYYrXJIK0L4nRO5N2rWh10WKM2jlkrMLgvxSAkptTTY%2FyiK0bAH%2BNKSHt%5Cn5ACYrt5O0%2FBzXEfDxI1wLrncTLqEYlE6VOrh4T3y69zvzSg8GAzB4yuIzuZrSztC%5CnfMvEESBiqeggJlOyyOobozHrElAoYSNraSqYPXBts%2Bhol9qZ9BjC9GbAgVJs6huZ%5CnqFNLAgMBAAGjODA2MA4GA1UdDwEB%2FwQEAwICpDATBgNVHSUEDDAKBggrBgEFBQcD%5CnATAPBgNVHRMBAf8EBTADAQH%2FMA0GCSqGSIb3DQEBCwUAA4IBAQBqphnF3OKOqDr%2F%5CnaE9gNsrqFFhmIaAWdqw9krLKrsVYLEBepHGf3lh4I4n3QwKx%2Fmhml5wMRVuqFfHC%5CnCUQFC9SVBW2evsg6m4NnOEaSGeq%2FJ3Bv%2FQUoCXmD8sDGvoTIX1MukkXcF7%2Bfn3FK%5CnAq80OadGcgtRhldGNpbTGQTAWAay22YE5Vu0xqw%2FKnZ%2BlZ42NHQOHo9Y9WJG1PEp%5CnhqI5H%2BdpCB7bmH4hVUDXDr69WjOIjD%2FR1M4NSEV6DXVphfUnOlpT71RfepPQu%2Bx0%5CnejCS8O%2FRApAROnQ5cbH255byo0Vbg%2B0MViLhWX58GTvVg7%2BRSo2cnMx5J4UVQsbi%5Cnrh5700wU%5Cn-----END+CERTIFICATE-----%5Cn%5Cn%22%2C%22nodes%22%3A%5B%22172.23.104.107%3A8091%22%2C%22172.23.106.118%3A8091%22%5D%7D%2C%7B%22warnings%22%3A%5B%5D%2C%22id%22%3A3%2C%22loadTimestamp%22%3A%222021-12-03T21%3A01%3A27.000Z%22%2C%22subject%22%3A%22C%3DUA%2C+O%3DMyCompany%2C+CN%3Dclientroot%22%2C%22notBefore%22%3A%222021-12-03T21%3A01%3A11.000Z%22%2C%22notAfter%22%3A%222031-12-01T21%3A01%3A11.000Z%22%2C%22type%22%3A%22uploaded%22%2C%22pem%22%3A%22-----BEGIN+CERTIFICATE-----%5CnMIIDqzCCApOgAwIBAgIUGYkT3ywm5El5HHnUQttqsSnVbV8wDQYJKoZIhvcNAQEL%5CnBQAwNjELMAkGA1UEBhMCVUExEjAQBgNVBAoMCU15Q29tcGFueTETMBEGA1UEAwwK%5CnY2xpZW50cm9vdDAeFw0yMTEyMDMyMTAxMTFaFw0zMTEyMDEyMTAxMTFaMDYxCzAJ%5CnBgNVBAYTAlVBMRIwEAYDVQQKDAlNeUNvbXBhbnkxEzARBgNVBAMMCmNsaWVudHJv%5Cnb3QwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnGQ3mo6ox3GmSY2%2BX%5CnAOAYbLlbBKTvt5UhQI8E8qKLBQ91z6vlapu7eUmVYfpx7BHozOcsJMYgm%2BICqe7X%5CnY4GzuwkxkZnk4zYKRGYrfFbovpfzMEFK%2B0nVL7hJWYN%2Bk0uwY7d5bRbqR3Xn1%2BMy%5CnH3sgARpW268%2FHKZN1SWLzHg22s%2F7Lv8YjQEs4Q4iu2uruaqPAk6fUNKiXQwL%2FDLl%5CndbP8UtM8tnlPF84qNQqujQth6CWzrKl1bY1euV7hEQGvlt%2BqJUV4GuJTYKJY%2FN%2FA%5CnYkImvO7gjAQAEmBoFcGWxGWXuBo6a0rLkz1n9PWTBdm6hnhpcwCj%2FGHOz4HXC%2FN5%5CnOyDrAgMBAAGjgbAwga0wDAYDVR0TBAUwAwEB%2FzAdBgNVHQ4EFgQUor%2BWFMi1Zykv%5CnBLlQupLMCIMx0vwwcQYDVR0jBGowaIAUor%2BWFMi1ZykvBLlQupLMCIMx0vyhOqQ4%5CnMDYxCzAJBgNVBAYTAlVBMRIwEAYDVQQKDAlNeUNvbXBhbnkxEzARBgNVBAMMCmNs%5CnaWVudHJvb3SCFBmJE98sJuRJeRx51ELbarEp1W1fMAsGA1UdDwQEAwIBBjANBgkq%5CnhkiG9w0BAQsFAAOCAQEA02uwAyvda3agyl%2BUbUajdAJE48oWiq3K3OUdb%2B4djR5n%5Cn6E4DsgjtXoPcXABycAmBD95pSf4JK9hbHZvl5vQe5fqm%2FYRMBj5Iy74vQXJadVvA%5Cn1PTfcIazbJPrb1z2umIANrvN9c7Wlol2kHcvwxwS9rKRzCosyeDQcV%2F1%2BpsEJE%2Fp%5CnDMVl7eJggGrq1yL%2B%2BfI0sJlDEJtGJLqRoSsR%2BjbzLzzbwK9gpwELC7KyE%2FbElNJa%5CnF%2Bwk9yI6c9Mmbhwd0O3PK0FkMvh%2BS%2FjQG%2FoKGwMcZv8aordsHLqefc3PQZTFhliJ%5CnP71rTIvsFvqoMeHqny3nb8tB5VQJoipIbg6kCA2o%2BA%3D%3D%5Cn-----END+CERTIFICATE-----%5Cn%5Cn%22%2C%22loadHost%22%3A%22172.23.104.107%22%2C%22loadFile%22%3A%22%2Fopt%2Fcouchbase%2Fvar%2Flib%2Fcouchbase%2Finbox%2FCA%2Fclientroot_ca.pem%22%2C%22nodes%22%3A%5B%5D%7D%2C%7B%22warnings%22%3A%5B%5D%2C%22id%22%3A4%2C%22loadTimestamp%22%3A%222021-12-03T21%3A01%3A27.000Z%22%2C%22subject%22%3A%22C%3DUA%2C+O%3DMyCompany%2C+CN%3Dr3%22%2C%22notBefore%22%3A%222021-12-03T21%3A01%3A09.000Z%22%2C%22notAfter%22%3A%222031-12-01T21%3A01%3A09.000Z%22%2C%22type%22%3A%22uploaded%22%2C%22pem%22%3A%22-----BEGIN+CERTIFICATE-----%5CnMIIDkzCCAnugAwIBAgIUWovxpterRjR7tQUNF05Q%2Bip1P2YwDQYJKoZIhvcNAQEL%5CnBQAwLjELMAkGA1UEBhMCVUExEjAQBgNVBAoMCU15Q29tcGFueTELMAkGA1UEAwwC%5CncjMwHhcNMjExMjAzMjEwMTA5WhcNMzExMjAxMjEwMTA5WjAuMQswCQYDVQQGEwJV%5CnQTESMBAGA1UECgwJTXlDb21wYW55MQswCQYDVQQDDAJyMzCCASIwDQYJKoZIhvcN%5CnAQEBBQADggEPADCCAQoCggEBALMXyyoe%2B52i%2Bbiln1M99Wh7HqgIPJ1Hg8hfSi4R%5CndK2CajOg22DTnDcZbMr0yyMaYuzc0k6E8Hv9rRSMM7Z8a1d7mlmgWz0zxhWFkFcS%5Cnu64tTYeNEKXvFJmqymsad4BVGyLFCcCDSWXD3S01Gni15V58HxtIEU09fMA8Rlo%2F%5CnXZeYk3MMccJVOKCv9pfupUJoCg1S399%2B7ULFVn4BDnYK09l61hQn08TpIvJ1%2F2sQ%5CnOQaEkqX3eSyRAOtk65NXN00g21I1eVl%2FODtTObSMxx3JU1GX3AokrWiytEM%2B%2BPuu%5CnM4ndUmh%2Bs0Jgy50DQ%2BV%2B3fVGNXbYnM8lZRCgfKr0MdkctzECAwEAAaOBqDCBpTAM%5CnBgNVHRMEBTADAQH%2FMB0GA1UdDgQWBBT0f8FeeG27pxqDvYWX2dES6ELSMjBpBgNV%5CnHSMEYjBggBT0f8FeeG27pxqDvYWX2dES6ELSMqEypDAwLjELMAkGA1UEBhMCVUEx%5CnEjAQBgNVBAoMCU15Q29tcGFueTELMAkGA1UEAwwCcjOCFFqL8abXq0Y0e7UFDRdO%5CnUPoqdT9mMAsGA1UdDwQEAwIBBjANBgkqhkiG9w0BAQsFAAOCAQEApyC2srs0gnDT%5CnMenzdUF%2BmVPDKfey%2BiFCPSl1WDTgPOnb4ZzgXctn93U5ajgi6NOe4ltZYP1CCIH6%5CnIvrJSBfOwPCeU90qNAyqa6yp%2F%2FZqUUe8zAfh7Y%2BoQXO6NBt%2BluSr5b0d%2BcndUNo0%5CnhLxHHX4AI01%2B5amQWvKxb8Fe4jC4ZLosXzNzsy%2FUf5DPA2m%2BdWOqj5zkiAPfHe8J%5Cnx26qZEI%2F5lZ%2FfX%2BbGZdrbsigEgaYOkCRKs6a2U4H5bw3TsBTsfMIhSDMaY%2FkaJAq%5Cn5cVQA%2BKax%2Fwt%2B2C%2BTgfor%2Fyy5o17oxKTDB5mLHts4Ud5AU2nTtPqYK%2B9F4DFuKFQ%5Cnd18stbHW4A%3D%3D%5Cn-----END+CERTIFICATE-----%5Cn%5Cn%22%2C%22loadHost%22%3A%22172.23.104.107%22%2C%22loadFile%22%3A%22%2Fopt%2Fcouchbase%2Fvar%2Flib%2Fcouchbase%2Finbox%2FCA%2Fr3_ca.pem%22%2C%22nodes%22%3A%5B%5D%7D%2C%7B%22warnings%22%3A%5B%5D%2C%22id%22%3A5%2C%22loadTimestamp%22%3A%222021-12-03T21%3A01%3A27.000Z%22%2C%22subject%22%3A%22C%3DUA%2C+O%3DMyCompany%2C+CN%3Dr2%22%2C%22notBefore%22%3A%222021-12-03T21%3A01%3A09.000Z%22%2C%22notAfter%22%3A%222031-12-01T21%3A01%3A09.000Z%22%2C%22type%22%3A%22uploaded%22%2C%22pem%22%3A%22-----BEGIN+CERTIFICATE-----%5CnMIIDkzCCAnugAwIBAgIUNwhvb2lf5zONuZYO%2FQVcf8DkraIwDQYJKoZIhvcNAQEL%5CnBQAwLjELMAkGA1UEBhMCVUExEjAQBgNVBAoMCU15Q29tcGFueTELMAkGA1UEAwwC%5CncjIwHhcNMjExMjAzMjEwMTA5WhcNMzExMjAxMjEwMTA5WjAuMQswCQYDVQQGEwJV%5CnQTESMBAGA1UECgwJTXlDb21wYW55MQswCQYDVQQDDAJyMjCCASIwDQYJKoZIhvcN%5CnAQEBBQADggEPADCCAQoCggEBALKbzLm95U8xE2dftqAlg%2FF29dae%2BOF6otdo6hf8%5CnpjRChafcrVPkxKJ3Qgfuyj4hQHC7K5eZrm8I5suPkMPcO%2F9cOLd%2BHAALuJuM9wqD%5CnwlI2He%2FhWBXzoRWOGpoYmGlpr257HEvwWu3NeiocLQV7R9eeXOzRe5M0FpVf36%2FU%5Cn%2FGCDE3ANY4Qyz7HSJuqtWcB47%2BoK25BP8LY0ey1I8MwCfa6s7Ilr2K8BgdWVjeMx%5Cn0Z2BDF%2Brw3ua3e4NHoyPDhWT5ttHigouUf%2FJw3Z5W3BOsm8LYLzAfgqm14JLVLzN%5CnY7e%2FzwW7c8hqU1TvUUkx6OT%2B1xIWtYJTmmTx8Keo08XxH1MCAwEAAaOBqDCBpTAM%5CnBgNVHRMEBTADAQH%2FMB0GA1UdDgQWBBQ7qhqgM7PaY7pHuAfimHInj%2F8TuzBpBgNV%5CnHSMEYjBggBQ7qhqgM7PaY7pHuAfimHInj%2F8Tu6EypDAwLjELMAkGA1UEBhMCVUEx%5CnEjAQBgNVBAoMCU15Q29tcGFueTELMAkGA1UEAwwCcjKCFDcIb29pX%2BczjbmWDv0F%5CnXH%2FA5K2iMAsGA1UdDwQEAwIBBjANBgkqhkiG9w0BAQsFAAOCAQEACG2ZLXJU9noc%5Cn%2BBKn0iylSM7bEDYjwJndWrsrSFAHsh3%2B4Zqt52AMs%2Fm3wVrbzZbhHtqe8sEl1M2B%5CnG6yvF4AUkonM5ZAoZXWLg6fo7xSWoL%2FlmLOegLrzkMeHjqNkiOtoVCUJ25x8r66a%5Cnv7e7A19GP1E3uYzjb5jkb1gR0jiPXR%2BeSP5hy%2FtH8dlanJVIrprasDPzL36LpMg%2F%5Cnn3IiaqsQAZayBVI5WutC%2BoFTS%2BWODgjFxdG22NZN4KZQcoF%2By2tLJxA4COxDHS07%5CnmCnVdjsq44KfYdwPZ2BbcIGxDEgJV1thBHATKS8nHREaIZ4dn4EQoUR1U%2BtJe6Ve%5CnKqUuLy1lww%3D%3D%5Cn-----END+CERTIFICATE-----%5Cn%5Cn%22%2C%22loadHost%22%3A%22172.23.104.107%22%2C%22loadFile%22%3A%22%2Fopt%2Fcouchbase%2Fvar%2Flib%2Fcouchbase%2Finbox%2FCA%2Fr2_ca.pem%22%2C%22nodes%22%3A%5B%5D%7D%2C%7B%22warnings%22%3A%5B%5D%2C%22id%22%3A6%2C%22loadTimestamp%22%3A%222021-12-03T21%3A01%3A27.000Z%22%2C%22subject%22%3A%22C%3DUA%2C+O%3DMyCompany%2C+CN%3Dr1%22%2C%22notBefore%22%3A%222021-12-03T21%3A01%3A07.000Z%22%2C%22notAfter%22%3A%222031-12-01T21%3A01%3A07.000Z%22%2C%22type%22%3A%22uploaded%22%2C%22pem%22%3A%22-----BEGIN+CERTIFICATE-----%5CnMIIDkzCCAnugAwIBAgIUSmgALl%2BidJ2my1E3XKcXOdxy6ogwDQYJKoZIhvcNAQEL%5CnBQAwLjELMAkGA1UEBhMCVUExEjAQBgNVBAoMCU15Q29tcGFueTELMAkGA1UEAwwC%5CncjEwHhcNMjExMjAzMjEwMTA3WhcNMzExMjAxMjEwMTA3WjAuMQswCQYDVQQGEwJV%5CnQTESMBAGA1UECgwJTXlDb21wYW55MQswCQYDVQQDDAJyMTCCASIwDQYJKoZIhvcN%5CnAQEBBQADggEPADCCAQoCggEBAK85zDlvrIbJK4I4PMYXL7V5n%2Fd%2BmGDNmZlonUFZ%5Cnhs1UwqRbk%2BadYOandkjyHL9pRd6LT8c1D3HHlSPDfkUx6A%2FQPdGhAbzIW0j8bjlN%5CnnpOYDpja14NuWXYh91wUe2uPgqUckyhI15X2zwAjrPHhLfvubLSaMsKhJ7YwE3ob%5CnkIHnGr7yBLaj1MY%2Fe3kAZBl%2BrwyrdxacPis1SJrci%2BBLfcg7KAA3%2BdMne%2BieHFye%5CnkjG4vHRa4T27%2Bs%2F4sqMbCbVBP1Iji7SKn2VWzHLVbtEYjZ4ESqEJizh7J8DArUk2%5Cn5j%2BYiyzhmBi0REFnaMx17l3ErMnhjo%2FfMrYmsQYkXptQr38CAwEAAaOBqDCBpTAM%5CnBgNVHRMEBTADAQH%2FMB0GA1UdDgQWBBQfN%2B9okLY4QQTOe5MTW1GyPkFBjTBpBgNV%5CnHSMEYjBggBQfN%2B9okLY4QQTOe5MTW1GyPkFBjaEypDAwLjELMAkGA1UEBhMCVUEx%5CnEjAQBgNVBAoMCU15Q29tcGFueTELMAkGA1UEAwwCcjGCFEpoAC5fonSdpstRN1yn%5CnFznccuqIMAsGA1UdDwQEAwIBBjANBgkqhkiG9w0BAQsFAAOCAQEAA5ZEfTlg6O1W%5Cn92fySVqCVltJ%2BQ%2Bk6ElwXv0UK29Z2w4LgyH%2Bjn5i78XPm8%2FNsqHXavDan55wlnUW%5CnK857UOo7VKOQZzXPXLM%2F2%2FbH2SbzYZD4Y5CA%2FGu5mobebEeZa2SzTt3FY7j7QASh%5Cn0M1y%2BTz%2F%2BMY37zxFU9JrL%2F03xnFH4KlYYODktWIm9Yvd4HKH6UjzBD0t88K3r%2FtH%5Cn11TnKer7PlXfAAtZVsLqijsIftuSqht1%2F1QhuMFEeLsz4MPN%2B0B1ewbBDnRg5oml%5Cn79ZB8EaJLB9nt9NoP4m8aK%2BNz8eV9ovW80Z5m7kvHxoo4faMeda9WM17OI285p1n%5Cn8gal9jxQZw%3D%3D%5Cn-----END+CERTIFICATE-----%5Cn%5Cn%22%2C%22loadHost%22%3A%22172.23.104.107%22%2C%22loadFile%22%3A%22%2Fopt%2Fcouchbase%2Fvar%2Flib%2Fcouchbase%2Finbox%2FCA%2Fr1_ca.pem%22%2C%22nodes%22%3A%5B%5D%7D%5D&secureType=full headers: {'Content-Type': 'application/x-www-form-urlencoded', 'Authorization': 'Basic QWRtaW5pc3RyYXRvcjpwYXNzd29yZA==', 'Accept': '*/*'} error: 400 reason: unknown b'{"_":"Failed to parse given certificates. Certificates must be one or more, PEM-encoded x509 certificate and nothing more."}\n' auth: Administrator:password
      

      Attachments

        No reviews matched the request. Check your Options in the drop-down menu of this sections header.

        Activity

          People

            pavithra.mahamani Pavithra Mahamani (Inactive)
            pavithra.mahamani Pavithra Mahamani (Inactive)
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved:

              Gerrit Reviews

                There are no open Gerrit changes

                PagerDuty