Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Invalid JWT signature if --el is not specified #5665

Closed
lgaroche opened this issue Dec 12, 2023 · 1 comment
Closed

Invalid JWT signature if --el is not specified #5665

lgaroche opened this issue Dec 12, 2023 · 1 comment

Comments

@lgaroche
Copy link

lgaroche commented Dec 12, 2023

Bug description
By default, the nimbus node connects to a local EL client on http://127.0.0.1:8551, if the --el option is omitted. When doing so, the JWT is rejected by the EL (I'm using Reth).
If I explicitly specify the command line option --el=http://127.0.0.1:8551, then the clients can communicate well.

To Reproduce
Nimbus version: v23.11.0-3a527d-stateofus
Reth version: 0.1.0-alpha.13
OS: Rocky Linux 9 5.14.0-362.8.1.el9_3.x86_64
Running EL and CL on the same host. IPTables are open (all ACCEPT)

Reth is running, listening on localhost port 8551.

Start nimbus without --elflag:

/build/nimbus_beacon_node --network:mainnet --jwt-secret=/root/.local/share/reth/mainnet/jwt.hex

Bug: JWT error:
In Nimbus logs: WRN 2023-12-12 16:07:26.078+01:00 Failed to exchange transition configuration topics="elmon" url=http://127.0.0.1:8551 err=Unauthorized
In Reth logs: 2023-12-12T15:07:26.078366Z ERROR engine::jwt-validator: Invalid JWT: provided signature is invalid

Start nimbus with the flag:

./build/nimbus_beacon_node --network:mainnet --el=http://127.0.0.1:8551 --jwt-secret=/root/.local/share/reth/mainnet/jwt.hex

Then there's no error.

Expected behavior
As the default EL Url is the same as the one I specify, it should work without the flag.

tersec added a commit that referenced this issue Dec 15, 2023
zah pushed a commit that referenced this issue Dec 16, 2023
@tersec
Copy link
Contributor

tersec commented Dec 16, 2023

#5671

@tersec tersec closed this as completed Dec 16, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants