Date
1 - 2 of 2
Issue regarding Multiple Certificates in Odl KeyStore- Looking for guidance.
|
Ajay Deep Singh <ajay.deep.singh@...>
Hi All,
Hope everyone is doing good.
I am running into issue where experiencing Connection Failure() after uploading two sets of Certificates in ODl KeyStore and try connecting Netconf supported external Node(Simulator) over TLS on to ODL.
Also when I individualy test below Certificates and try adding external Node Connection is successful.
Exception I encounter in Karaf Logs :
Made Post Request on below Endpoint and we can find output via Get Endpoint.
Get Request on : http://localhost:8181/restconf/config/netconf-keystore:keystore
Regards,
Ajay
|
|
|
|
Ajay Deep Singh <ajay.deep.singh@...>
Hi All,
To add more on below mail:
I have excatly tried adding Certificates in the Format it was reflected in :
 Endpoint.
I am not able to find if Multiple set of Certificates are supported in ODL or not .?
Please can anyone have a look and point out if am doing something wrong..?
ODL version : NEON.
Followed Format: as on Rest endpoint
**(config)private-key
{
"netconf-keystore:private-key": [
{
"netconf-keystore:name": "Optional.empty",
"netconf-keystore:data": "Optional.empty",
"netconf-keystore:certificate-chain": [
"Optional.empty"
]
}
]
}
**(config)trusted-certificate
{
"netconf-keystore:trusted-certificate": [
{
"netconf-keystore:name": "Optional.empty",
"netconf-keystore:certificate": "Optional.empty"
}
]
}
Exception I encounter in Karaf Logs :
2020-05-05T12:44:38,973 | INFO | nioEventLoopGroupCloseable-3-4 | AbstractNetconfSessionNegotiator | 352 - org.opendaylight.netconf.netty-util - 1.6.1 | - | Unexpected error during
negotiation
io.netty.handler.codec.DecoderException: javax.net.ssl.SSLException:
Received fatal alert: unknown_ca
at io.netty.handler.codec.ByteToMessageDecoder.callDecode(ByteToMessageDecoder.java:472) ~[61:io.netty.codec:4.1.34.Final]
xception: complete already: NetconfSessionPromise@4fca1aee(failure: io.netty.handler.codec.DecoderException: javax.net.ssl.SSLException: Received fatal alert: unknown_ca)'
[enable DEB
UG level for full stacktrace] was thrown by a user handler's exceptionCaught() method while handling the following exception:
io.netty.handler.codec.DecoderException: javax.net.ssl.SSLException: Received fatal alert: unknown_ca
2020-05-05T12:44:38,988 | WARN | nioEventLoopGroupCloseable-3-5 | DefaultPromise | 63 - io.netty.common - 4.1.34.Final | - | An exception was thrown by org.openda
ylight.netconf.nettyutil.AbstractNetconfSessionNegotiator$$Lambda$1162/51785401.operationComplete()
java.lang.IllegalStateException:
Ssl handshake was not successful
at com.google.common.base.Preconditions.checkState(Preconditions.java:507) ~[38:com.google.guava:25.1.0.jre]
Regards,
Ajay
From: Ajay Deep Singh
Sent: Tuesday, May 5, 2020 1:45 PM To: dev@... <dev@...>; integration-dev@... <integration-dev@...> Cc: Tobias Mole <tobias.mole@...> Subject: Issue regarding Multiple Certificates in Odl KeyStore- Looking for guidance.
Hi All,
Hope everyone is doing good.
I am running into issue where experiencing Connection Failure() after uploading two sets of Certificates in ODl KeyStore and try connecting Netconf supported external Node(Simulator) over TLS on to ODL.
Also when I individualy test below Certificates and try adding external Node Connection is successful.
Exception I encounter in Karaf Logs :
Made Post Request on below Endpoint and we can find output via Get Endpoint.
Get Request on : http://localhost:8181/restconf/config/netconf-keystore:keystore
Regards,
Ajay
|
|
|