Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Published Containers have expired certs #194

Closed
hdinthkld opened this issue Oct 8, 2022 · 0 comments
Closed

Published Containers have expired certs #194

hdinthkld opened this issue Oct 8, 2022 · 0 comments

Comments

@hdinthkld
Copy link

Just performed fresh install using the documented instructions below:

Containers fail to start due to the included certificate having expired in August 2022:
_netpalm-controller_1 | redis.exceptions.ConnectionError: Error 1 connecting to redis:6379. [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: certificate has expired (ssl.c:1131).

Please update documentation on the repo to include the additional step below:

  1. Ensure you first have docker installed
    sudo apt-get install docker.io
    sudo apt-get install docker-compose

  2. Clone this repository
    git clone https://github.com/tbotnz/netpalm.git
    cd netpalm

  3. Regenerate certificates <--- New Step
    ./redis_gen_new_certs.sh

  4. After the container has been built and started, you're good to go! netpalm will be available on port 9000 under your docker hosts IP.

Not sure if this the best way but it worked for me.

Additional improvement suggestions:

  1. Would it be possible for the compose script to automatically recreate the certificate upon each new build?

  2. Could steps be documented to explain how an admin can provide their own certificates if auto-regeneration is not possible/preferred?

It looks as though the regen script puts the certs into the below location:
/netpalm/netpalm/backend/core/security/cert/tls

Thanks

Lee

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants