Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

[Bug]: AMF Cannot find client When Using TLS #2252

Closed
infinitydon opened this issue Apr 16, 2023 · 3 comments
Closed

[Bug]: AMF Cannot find client When Using TLS #2252

infinitydon opened this issue Apr 16, 2023 · 3 comments
Labels
Housekeeping:BugToReview Housekeeping: Possible bug that might still be open type:bug Open5GS bug

Comments

@infinitydon
Copy link

infinitydon commented Apr 16, 2023 •
edited

Open5GS Release, Revision, or Tag

v2.6.2

Steps to reproduce

I tried to deploy open5gs using TLS mode, AMF keeps complaining that it can't connect to AUSF on port 443:

ERROR: [AUSF:ce9a7e50-dc01-41ed-ad8e-e9655557325a] Cannot find client [10.96.18.36:443]
04/16 02:53:30.810: [sbi] ERROR: [AUSF:ce9a7e50-dc01-41ed-ad8e-e9655557325a] Cannot find client [10.96.18.36:443] (../lib/sbi/path.c:421)
04/16 02:53:30.810: [amf] ERROR: amf_nnrf_handle_nf_discover: Expectation `true == amf_sbi_send_request(nf_instance, xact)' failed. (../src/amf/nnrf-handler.c:110)
04/16 02:53:40.813: [amf] ERROR: [suci-0-208-93-0000-0-0-0000000031] Cannot receive SBI message (../src/amf/amf-sm.c:680)
04/16 02:53:40.813: [amf] WARNING: [suci-0-208-93-0000-0-0-0000000031] Registration reject [90] (../src/amf/nas-path.c:219)

Also I don't why it is falling back to port 80, there is no reference to port 80 in the configuration.

04/16 02:53:30.809: [sbi] WARNING: NF EndPoint updated [10.96.18.36:80] (../lib/sbi/context.c:1618)
04/16 02:53:30.809: [sbi] WARNING: NF EndPoint updated [10.96.18.36:80] (../lib/sbi/context.c:1527)

Also NRF is complaining that it can't connect to UDM on port 443

N.B - I confirmed that all the NFs are listening on port 443

AUSF Config:

logger:
    file: /var/log/open5gs/ausf.log

ausf:
  sbi:
    - dev: eth0
      port: 443
      advertise: core5g-ausf.open5gs.svc.cluster.local
sbi:
    server:
      cacert: /var/run/autocert.step.sm/root.crt
      key: /var/run/autocert.step.sm/site.key
      cert: /var/run/autocert.step.sm/site.crt
    client:
      cacert: /var/run/autocert.step.sm/root.crt
      key: /var/run/autocert.step.sm/site.key
      cert: /var/run/autocert.step.sm/site.crt
nrf:
 sbi:
   - addr:
       - core5g-nrf.open5gs.svc.cluster.local
     port: 443

NRF Config:

logger:
    file: /var/log/open5gs/nrf.log

nrf:
  sbi:
  - dev: eth0
    port: 443
sbi:
    server:
      cacert: /var/run/autocert.step.sm/root.crt
      key: /var/run/autocert.step.sm/site.key
      cert: /var/run/autocert.step.sm/site.crt
    client:
      cacert: /var/run/autocert.step.sm/root.crt
      key: /var/run/autocert.step.sm/site.key
      cert: /var/run/autocert.step.sm/site.crt

AMF Config:

logger:
    file: /var/log/open5gs/amf.log
    #level: debug
    #domain: sbi

amf:
    sbi:
      - dev: eth0
        port: 443
        advertise: core5g-amf.open5gs.svc.cluster.local
    ngap:
      dev: eth0
    metrics:
      - addr: 0.0.0.0
        port: 9091
    guami:
      - plmn_id:
          mcc: 208
          mnc: 93
        amf_id:
          region: 2
          set: 1
    tai:
      - plmn_id:
          mcc: 208
          mnc: 93
        tac: 7
    plmn_support:
    - plmn_id:
        mcc: 208
        mnc: 93
      s_nssai:
      - sst: 1
        sd: 1
    security:
        integrity_order : [ NIA2, NIA1, NIA0 ]
        ciphering_order : [ NEA0, NEA1, NEA2 ]
    network_name:
        full: Open5GS
    amf_name: open5gs-amf
sbi:
    server:
      cacert: /var/run/autocert.step.sm/root.crt
      key: /var/run/autocert.step.sm/site.key
      cert: /var/run/autocert.step.sm/site.crt
    client:
      cacert: /var/run/autocert.step.sm/root.crt
      key: /var/run/autocert.step.sm/site.key
      cert: /var/run/autocert.step.sm/site.crt
nrf:
 sbi:
   - addr:
       - core5g-nrf.open5gs.svc.cluster.local
     port: 443

Logs

NRF Logs:


Open5GS daemon v2.6.2

04/16 02:53:01.210: [app] INFO: Configuration: '/open5gs/config-map/nrf.yaml' (../lib/app/ogs-init.c:126)
04/16 02:53:01.210: [app] INFO: File Logging: '/var/log/open5gs/nrf.log' (../lib/app/ogs-init.c:129)
04/16 02:53:01.217: [sbi] INFO: nghttp2_server() [https://10.244.1.223]:443 (../lib/sbi/nghttp2-server.c:395)
04/16 02:53:01.217: [app] INFO: NRF initialize...done (../src/nrf/app.c:31)
04/16 02:53:03.835: [nrf] INFO: [ce9a7e50-dc01-41ed-ad8e-e9655557325a] NF registered [Heartbeat:10s] (../src/nrf/nf-sm.c:190)
04/16 02:53:03.835: [nrf] INFO: [ce9a9a16-dc01-41ed-8727-0332406f7d41] NF registered [Heartbeat:10s] (../src/nrf/nf-sm.c:190)
04/16 02:53:03.837: [nrf] INFO: [cea5344e-dc01-41ed-bf2d-4bd6bfe0ed4b] Subscription created until 2023-04-17T02:53:03.837740+00:00 [validity_duration:86400] (../src/nrf/nnrf-handler.c:334)
04/16 02:53:03.838: [nrf] INFO: [cea56f40-dc01-41ed-bf2d-4bd6bfe0ed4b] Subscription created until 2023-04-17T02:53:03.838943+00:00 [validity_duration:86400] (../src/nrf/nnrf-handler.c:334)
04/16 02:53:04.803: [nrf] INFO: [cf2c1a18-dc01-41ed-a325-0968371fcaa9] NF registered [Heartbeat:10s] (../src/nrf/nf-sm.c:190)
04/16 02:53:04.803: [nrf] INFO: [cf2f15f6-dc01-41ed-8df0-9102f9d8db59] NF registered [Heartbeat:10s] (../src/nrf/nf-sm.c:190)
04/16 02:53:04.804: [nrf] INFO: [cf2feefe-dc01-41ed-90d2-89a8d5ba9797] NF registered [Heartbeat:10s] (../src/nrf/nf-sm.c:190)
04/16 02:53:04.804: [nrf] INFO: [cf309520-dc01-41ed-9207-f9351b6c1819] NF registered [Heartbeat:10s] (../src/nrf/nf-sm.c:190)
04/16 02:53:04.804: [nrf] INFO: [cf314c86-dc01-41ed-b7ce-ef61e3ea822d] NF registered [Heartbeat:10s] (../src/nrf/nf-sm.c:190)
04/16 02:53:04.805: [nrf] INFO: [cf31a122-dc01-41ed-9f49-d5427013baec] NF registered [Heartbeat:10s] (../src/nrf/nf-sm.c:190)
04/16 02:53:04.806: [nrf] INFO: [cf390ce6-dc01-41ed-bf2d-4bd6bfe0ed4b] Subscription created until 2023-04-17T02:53:04.806277+00:00 [validity_duration:86400] (../src/nrf/nnrf-handler.c:334)
04/16 02:53:04.807: [nrf] INFO: [cf393d4c-dc01-41ed-bf2d-4bd6bfe0ed4b] Subscription created until 2023-04-17T02:53:04.807300+00:00 [validity_duration:86400] (../src/nrf/nnrf-handler.c:334)
04/16 02:53:04.808: [nrf] INFO: [cf395958-dc01-41ed-bf2d-4bd6bfe0ed4b] Subscription created until 2023-04-17T02:53:04.808447+00:00 [validity_duration:86400] (../src/nrf/nnrf-handler.c:334)
04/16 02:53:04.809: [nrf] INFO: [cf39868a-dc01-41ed-bf2d-4bd6bfe0ed4b] Subscription created until 2023-04-17T02:53:04.809225+00:00 [validity_duration:86400] (../src/nrf/nnrf-handler.c:334)
04/16 02:53:04.810: [nrf] INFO: [cf39b54c-dc01-41ed-bf2d-4bd6bfe0ed4b] Subscription created until 2023-04-17T02:53:04.810447+00:00 [validity_duration:86400] (../src/nrf/nnrf-handler.c:334)
04/16 02:53:04.811: [nrf] INFO: [cf39d4be-dc01-41ed-bf2d-4bd6bfe0ed4b] Subscription created until 2023-04-17T02:53:04.811193+00:00 [validity_duration:86400] (../src/nrf/nnrf-handler.c:334)
04/16 02:53:04.812: [nrf] INFO: [cf3a0222-dc01-41ed-bf2d-4bd6bfe0ed4b] Subscription created until 2023-04-17T02:53:04.812335+00:00 [validity_duration:86400] (../src/nrf/nnrf-handler.c:334)
04/16 02:53:04.813: [nrf] INFO: [cf3a1ee2-dc01-41ed-bf2d-4bd6bfe0ed4b] Subscription created until 2023-04-17T02:53:04.813022+00:00 [validity_duration:86400] (../src/nrf/nnrf-handler.c:334)
04/16 02:53:04.814: [nrf] INFO: [cf3a44bc-dc01-41ed-bf2d-4bd6bfe0ed4b] Subscription created until 2023-04-17T02:53:04.814584+00:00 [validity_duration:86400] (../src/nrf/nnrf-handler.c:334)
04/16 02:53:04.815: [nrf] INFO: [cf3a7eaa-dc01-41ed-bf2d-4bd6bfe0ed4b] Subscription created until 2023-04-17T02:53:04.815448+00:00 [validity_duration:86400] (../src/nrf/nnrf-handler.c:334)
04/16 02:53:04.816: [nrf] INFO: [cf3a9d2c-dc01-41ed-bf2d-4bd6bfe0ed4b] Subscription created until 2023-04-17T02:53:04.816303+00:00 [validity_duration:86400] (../src/nrf/nnrf-handler.c:334)
04/16 02:53:05.817: [sbi] WARNING: [7] Failed to connect to core5g-udm.open5gs.svc.cluster.local port 443 after 1012 ms: Connection refused (../lib/sbi/client.c:626)
04/16 02:53:05.817: [nrf] WARNING: client_notify_cb() failed [-1] (../src/nrf/sbi-path.c:29)

AMF Logs:

Open5GS daemon v2.6.2

04/16 02:53:04.754: [app] INFO: Configuration: '/open5gs/config-map/amf.yaml' (../lib/app/ogs-init.c:126)
04/16 02:53:04.754: [app] INFO: File Logging: '/var/log/open5gs/amf.log' (../lib/app/ogs-init.c:129)
04/16 02:53:04.765: [metrics] INFO: metrics_server() [http://0.0.0.0]:9091 (../lib/metrics/prometheus/context.c:299)
04/16 02:53:04.765: [sbi] INFO: NF Service [namf-comm] (../lib/sbi/context.c:1436)
04/16 02:53:04.771: [sbi] INFO: nghttp2_server() [https://10.244.1.224]:443 (../lib/sbi/nghttp2-server.c:395)
04/16 02:53:04.771: [amf] INFO: ngap_server() [10.244.1.224]:38412 (../src/amf/ngap-sctp.c:61)
04/16 02:53:04.771: [sctp] INFO: AMF initialize...done (../src/amf/app.c:33)
04/16 02:53:04.805: [sbi] INFO: [cf31a122-dc01-41ed-9f49-d5427013baec] NF registered [Heartbeat:10s] (../lib/sbi/nf-sm.c:214)
04/16 02:53:04.809: [sbi] INFO: [cf39868a-dc01-41ed-bf2d-4bd6bfe0ed4b] Subscription created until 2023-04-17T02:53:04.809225+00:00 [duration:86400,validity:86399.999517,patch:43199.999758] (../lib/sbi/nnrf-handler.c:515)
04/16 02:53:04.811: [sbi] INFO: [cf39d4be-dc01-41ed-bf2d-4bd6bfe0ed4b] Subscription created until 2023-04-17T02:53:04.811193+00:00 [duration:86400,validity:86399.999594,patch:43199.999797] (../lib/sbi/nnrf-handler.c:515)
04/16 02:53:04.814: [sbi] INFO: [cf3a1ee2-dc01-41ed-bf2d-4bd6bfe0ed4b] Subscription created until 2023-04-17T02:53:04.813022+00:00 [duration:86400,validity:86399.998589,patch:43199.999294] (../lib/sbi/nnrf-handler.c:515)
04/16 02:53:04.814: [sbi] INFO: [cf3a44bc-dc01-41ed-bf2d-4bd6bfe0ed4b] Subscription created until 2023-04-17T02:53:04.814584+00:00 [duration:86400,validity:86399.999747,patch:43199.999873] (../lib/sbi/nnrf-handler.c:515)
04/16 02:53:04.815: [sbi] INFO: [cf3a7eaa-dc01-41ed-bf2d-4bd6bfe0ed4b] Subscription created until 2023-04-17T02:53:04.815448+00:00 [duration:86400,validity:86399.999831,patch:43199.999915] (../lib/sbi/nnrf-handler.c:515)
04/16 02:53:04.816: [sbi] INFO: [cf3a9d2c-dc01-41ed-bf2d-4bd6bfe0ed4b] Subscription created until 2023-04-17T02:53:04.816303+00:00 [duration:86400,validity:86399.999836,patch:43199.999918] (../lib/sbi/nnrf-handler.c:515)
04/16 02:53:27.370: [amf] INFO: gNB-N2 accepted[10.244.1.231]:59830 in ng-path module (../src/amf/ngap-sctp.c:113)
04/16 02:53:27.370: [amf] INFO: gNB-N2 accepted[10.244.1.231] in master_sm module (../src/amf/amf-sm.c:733)
04/16 02:53:27.370: [amf] INFO: [Added] Number of gNBs is now 1 (../src/amf/context.c:1175)
04/16 02:53:27.370: [amf] INFO: gNB-N2[10.244.1.231] max_num_of_ostreams : 10 (../src/amf/amf-sm.c:772)
04/16 02:53:30.702: [amf] INFO: InitialUEMessage (../src/amf/ngap-handler.c:372)
04/16 02:53:30.702: [amf] INFO: [Added] Number of gNB-UEs is now 1 (../src/amf/context.c:2481)
04/16 02:53:30.702: [amf] INFO:     RAN_UE_NGAP_ID[1] AMF_UE_NGAP_ID[1] TAC[7] CellID[0x10] (../src/amf/ngap-handler.c:533)
04/16 02:53:30.702: [amf] INFO: [suci-0-208-93-0000-0-0-0000000031] Unknown UE by SUCI (../src/amf/context.c:1778)
04/16 02:53:30.702: [amf] INFO: [Added] Number of AMF-UEs is now 1 (../src/amf/context.c:1560)
04/16 02:53:30.702: [gmm] INFO: Registration request (../src/amf/gmm-sm.c:985)
04/16 02:53:30.702: [gmm] INFO: [suci-0-208-93-0000-0-0-0000000031]    SUCI (../src/amf/gmm-handler.c:152)
04/16 02:53:30.702: [sbi] WARNING: Try to discover [nausf-auth] (../lib/sbi/path.c:348)
04/16 02:53:30.702: [sbi] INFO: [ce9a7e50-dc01-41ed-ad8e-e9655557325a] (NF-discover) NF registered (../lib/sbi/nnrf-handler.c:835)
04/16 02:53:30.705: [sbi] INFO: [ce9a7e50-dc01-41ed-ad8e-e9655557325a] (NF-discover) NF Profile updated (../lib/sbi/nnrf-handler.c:862)
04/16 02:53:30.803: [gmm] WARNING: Authentication failure(Synch failure) (../src/amf/gmm-sm.c:1367)
04/16 02:53:30.808: [sbi] WARNING: Try to discover [nausf-auth] (../lib/sbi/path.c:348)
04/16 02:53:30.808: [sbi] WARNING: [ce9a7e50-dc01-41ed-ad8e-e9655557325a] (NF-discover) NF has already been added (../lib/sbi/nnrf-handler.c:839)
04/16 02:53:30.809: [sbi] WARNING: NF EndPoint updated [10.96.18.36:80] (../lib/sbi/context.c:1618)
04/16 02:53:30.809: [sbi] WARNING: NF EndPoint updated [10.96.18.36:80] (../lib/sbi/context.c:1527)
04/16 02:53:30.809: [sbi] INFO: [ce9a7e50-dc01-41ed-ad8e-e9655557325a] (NF-discover) NF Profile updated (../lib/sbi/nnrf-handler.c:862)
04/16 02:53:30.809: [amf] WARNING: NF Instance updated [ce9a7e50-dc01-41ed-ad8e-e9655557325a] (../src/amf/context.c:2179)
04/16 02:53:30.810: [sbi] ERROR: [AUSF:ce9a7e50-dc01-41ed-ad8e-e9655557325a] Cannot find client [10.96.18.36:443] (../lib/sbi/path.c:421)
04/16 02:53:30.810: [amf] ERROR: amf_nnrf_handle_nf_discover: Expectation `true == amf_sbi_send_request(nf_instance, xact)' failed. (../src/amf/nnrf-handler.c:110)
04/16 02:53:40.813: [amf] ERROR: [suci-0-208-93-0000-0-0-0000000031] Cannot receive SBI message (../src/amf/amf-sm.c:680)
04/16 02:53:40.813: [amf] WARNING: [suci-0-208-93-0000-0-0-0000000031] Registration reject [90] (../src/amf/nas-path.c:219)
04/16 02:53:51.721: [gmm] WARNING: Registration request (../src/amf/gmm-sm.c:1395)
04/16 02:53:51.721: [gmm] INFO: [suci-0-208-93-0000-0-0-0000000031]    SUCI (../src/amf/gmm-handler.c:152)
04/16 02:53:51.721: [amf] WARNING: GUTI has already been allocated (../src/amf/context.c:1370)
04/16 02:53:51.728: [sbi] WARNING: Try to discover [nausf-auth] (../lib/sbi/path.c:348)
04/16 02:53:51.728: [sbi] WARNING: [ce9a7e50-dc01-41ed-ad8e-e9655557325a] (NF-discover) NF has already been added (../lib/sbi/nnrf-handler.c:839)
04/16 02:53:51.729: [sbi] WARNING: NF EndPoint updated [10.96.18.36:80] (../lib/sbi/context.c:1618)
04/16 02:53:51.730: [sbi] WARNING: NF EndPoint updated [10.96.18.36:80] (../lib/sbi/context.c:1527)
04/16 02:53:51.730: [sbi] INFO: [ce9a7e50-dc01-41ed-ad8e-e9655557325a] (NF-discover) NF Profile updated (../lib/sbi/nnrf-handler.c:862)
04/16 02:53:51.730: [amf] WARNING: NF Instance updated [ce9a7e50-dc01-41ed-ad8e-e9655557325a] (../src/amf/context.c:2179)
04/16 02:53:51.730: [sbi] ERROR: [AUSF:ce9a7e50-dc01-41ed-ad8e-e9655557325a] Cannot find client [10.96.18.36:443] (../lib/sbi/path.c:421)
04/16 02:53:51.730: [amf] ERROR: amf_nnrf_handle_nf_discover: Expectation `true == amf_sbi_send_request(nf_instance, xact)' failed. (../src/amf/nnrf-handler.c:110)
04/16 02:54:01.731: [amf] ERROR: [suci-0-208-93-0000-0-0-0000000031] Cannot receive SBI message (../src/amf/amf-sm.c:680)
04/16 02:54:01.731: [amf] WARNING: [suci-0-208-93-0000-0-0-0000000031] Registration reject [90] (../src/amf/nas-path.c:219)
04/16 02:54:11.741: [gmm] WARNING: Registration request (../src/amf/gmm-sm.c:1395)
04/16 02:54:11.741: [gmm] INFO: [suci-0-208-93-0000-0-0-0000000031]    SUCI (../src/amf/gmm-handler.c:152)
04/16 02:54:11.741: [amf] WARNING: GUTI has already been allocated (../src/amf/context.c:1370)
04/16 02:54:11.745: [gmm] WARNING: Authentication failure(Synch failure) (../src/amf/gmm-sm.c:1367)
04/16 02:54:11.749: [sbi] WARNING: Try to discover [nausf-auth] (../lib/sbi/path.c:348)
04/16 02:54:11.750: [sbi] WARNING: [ce9a7e50-dc01-41ed-ad8e-e9655557325a] (NF-discover) NF has already been added (../lib/sbi/nnrf-handler.c:839)
04/16 02:54:11.750: [sbi] WARNING: NF EndPoint updated [10.96.18.36:80] (../lib/sbi/context.c:1618)
04/16 02:54:11.751: [sbi] WARNING: NF EndPoint updated [10.96.18.36:80] (../lib/sbi/context.c:1527)

AUSF Logs:

Open5GS daemon v2.6.2

04/16 02:53:03.763: [app] INFO: Configuration: '/open5gs/config-map/ausf.yaml' (../lib/app/ogs-init.c:126)
04/16 02:53:03.763: [app] INFO: File Logging: '/var/log/open5gs/ausf.log' (../lib/app/ogs-init.c:129)
04/16 02:53:03.772: [sbi] INFO: NF Service [nausf-auth] (../lib/sbi/context.c:1436)
04/16 02:53:03.777: [sbi] INFO: nghttp2_server() [https://10.244.1.222]:443 (../lib/sbi/nghttp2-server.c:395)
04/16 02:53:03.777: [app] INFO: AUSF initialize...done (../src/ausf/app.c:31)
04/16 02:53:03.836: [sbi] INFO: [ce9a7e50-dc01-41ed-ad8e-e9655557325a] NF registered [Heartbeat:10s] (../lib/sbi/nf-sm.c:214)
04/16 02:53:03.837: [sbi] INFO: [cea5344e-dc01-41ed-bf2d-4bd6bfe0ed4b] Subscription created until 2023-04-17T02:53:03.837740+00:00 [duration:86400,validity:86399.999769,patch:43199.999884] (../lib/sbi/nnrf-handler.c:515)
04/16 02:53:30.735: [sbi] WARNING: Try to discover [nudm-ueau] (../lib/sbi/path.c:348)
04/16 02:53:30.736: [sbi] INFO: [ce9a9a16-dc01-41ed-8727-0332406f7d41] (NF-discover) NF registered (../lib/sbi/nnrf-handler.c:835)
04/16 02:53:30.738: [sbi] INFO: [ce9a9a16-dc01-41ed-8727-0332406f7d41] (NF-discover) NF Profile updated (../lib/sbi/nnrf-handler.c:862)

Expected behaviour

AMF and AUSF should be able to communicate without any issues

Observed Behaviour

AMF is having issues communicating with AUSF

NRF seems to be having issues communicating with UDM (This might be a temporary connectivity issue)

eNodeB/gNodeB

ueransim

UE Models and versions

ueransim
@infinitydon infinitydon added the triage Triage label for new issues and feature requests label Apr 16, 2023
@infinitydon infinitydon changed the title [Bug]: AMF Authentication failure(Synch failure) When Using TLS [Bug]: AMF Cannot find client When Using TLS Apr 16, 2023
@infinitydon
Copy link
Author

infinitydon commented Apr 17, 2023 •
edited

I also tested with using SCP,

logger:
    file: /var/log/open5gs/amf.log
    level: debug
    #domain: sbi

amf:
    sbi:
    - dev: eth0
      port: 443
      advertise: core5g-amf.open5gs.svc.cluster.local
    discovery:
       delegated: no
    ngap:
      dev: eth0
    metrics:
      - addr: 0.0.0.0
        port: 9091
    guami:
      - plmn_id:
          mcc: 208
          mnc: 93
        amf_id:
          region: 2
          set: 1
    tai:
      - plmn_id:
          mcc: 208
          mnc: 93
        tac: 7
    plmn_support:
    - plmn_id:
        mcc: 208
        mnc: 93
      s_nssai:
      - sst: 1
        sd: 1
    security:
        integrity_order : [ NIA2, NIA1, NIA0 ]
        ciphering_order : [ NEA0, NEA1, NEA2 ]
    network_name:
        full: Open5GS
    amf_name: open5gs-amf
sbi:
    server:
      cacert: /var/run/autocert.step.sm/root.crt
      key: /var/run/autocert.step.sm/site.key
      cert: /var/run/autocert.step.sm/site.crt
    client:
      cacert: /var/run/autocert.step.sm/root.crt
      key: /var/run/autocert.step.sm/site.key
      cert: /var/run/autocert.step.sm/site.crt
scp:
 sbi:
   - addr:
       - core5g-scp.open5gs.svc.cluster.local
     port: 443
nrf:
 sbi:
   - addr:
       - core5g-nrf.open5gs.svc.cluster.local
     port: 443

Behavior is same, AMF debug logs attached below

open5gs-amf-tls-scp.txt

@acetcom
Copy link
Member

acetcom commented Apr 17, 2023

@infinitydon

There seems to be a bug in open5gs.

If you need to use it before bug patch, you can modify and use it as below.

$ diff --git a/lib/sbi/context.c b/lib/sbi/context.c
index 587f3056d..79a646fb0 100644
--- a/lib/sbi/context.c
+++ b/lib/sbi/context.c
@@ -122,7 +122,7 @@ ogs_sbi_context_t *ogs_sbi_self(void)
 
 static int ogs_sbi_context_prepare(void)
 {
-    self.sbi_port = OGS_SBI_HTTP_PORT;
+    self.sbi_port = OGS_SBI_HTTPS_PORT;
 
 #if ENABLE_ACCEPT_ENCODING
     self.content_encoding = "gzip";

I hope to have this issue resolved soon.

Thanks a lot!
Sukchan

@acetcom acetcom added Housekeeping:BugToReview Housekeeping: Possible bug that might still be open type:bug Open5GS bug and removed triage Triage label for new issues and feature requests labels Apr 17, 2023
@infinitydon
Copy link
Author

Thanks @acetcom - Patch works.

acetcom added a commit that referenced this issue Apr 21, 2023
@acetcom
[SBI] Fixed an issue with FQDN/TLS (#2252)
a87f38f
acetcom added a commit that referenced this issue Apr 21, 2023
@acetcom
[SBI] Fixed an issue with FQDN/TLS (#2252)
de7e0d3
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
Housekeeping:BugToReview Housekeeping: Possible bug that might still be open type:bug Open5GS bug
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
2 participants
@acetcom @infinitydon