Uploaded image for project: 'Couchbase Server'
  1. Couchbase Server
  2. MB-61575

Pre-check failing when CA + Certificates rotated

    XMLWordPrintable

Details

    • Bug
    • Resolution: Unresolved
    • Major
    • None
    • 7.6.0
    • XDCR
    • None
    • Untriaged
    • 0
    • Unknown

    Description

      We're running into an issue in Operator tests where XDCR pre-checks are failing with the following error:

      test-couchbase-rmo4d-0000.test-couchbase-rmo4d.test-2cxv6.svc:8091:[x509: certificate signed by unknown authority (possibly because of "crypto/rsa: verification error" while trying to verify candidate authority certificate "Couchbase CA"

       

      when we rotate a CA. However the XDCR connection can be made even if the precheck fails.

      Is there any reason why this might happen?

      Attachments

        1. remote_xdcrlogs
          165 kB
        2. xdcr.logs
          199 kB
        3. xdcrlogs_2
          106 kB
        For Gerrit Dashboard: MB-61575
        # Subject Branch Project Status CR V
        209490,1 Mb-61575: debugging master goxdcr Status: NEW -2 -1

        Activity

          People

            sumukh.bhat Sumukh Bhat
            usamah.jassat Usamah Jassat
            Votes:
            0 Vote for this issue
            Watchers:
            5 Start watching this issue

            Dates

              Created:
              Updated:

              Gerrit Reviews

                There is 1 open Gerrit change

                PagerDuty