Thanks, my work around was to that problem was to put an Apache in front of the dashboard. > Le 4 mai 2021 à 20:49, Ernesto Puerta <epuertat@xxxxxxxxxx> a écrit : > > Hi Fabrice, > > Don't worry, it has nothing to do with the internal format of those > certificates. It's been a recent breakage and will be fixed in 16.2.2. In > the meantime, you can find a workaround (well, you already nailed it: the > CLI command that failed is just a wrapper around the "ceph config-key set" > command), as well as the details and the PR here: the fix: > https://tracker.ceph.com/issues/50519 > > > Kind Regards, > Ernesto > > > On Tue, May 4, 2021 at 12:10 PM Fabrice Bacchella < > fabrice.bacchella@xxxxxxxxx> wrote: > >> And worst: >> >> $ ceph config-key set mgr/restful/fa42/crt -i /data/ceph/conf/ceph.crt >> set mgr/restful/fa42/crt >> >> The exact same certificate is accepted by the mgr. >> >> >>> Le 3 mai 2021 à 23:03, Fabrice Bacchella <fabrice.bacchella@xxxxxxxxx> >> a écrit : >>> >>> Once activated the dashboard, I try to import certificates, but it fails: >>> >>> $ ceph dashboard set-ssl-certificate-key -i /data/ceph/conf/ceph.key >>> Error EINVAL: Traceback (most recent call last): >>> File "/usr/share/ceph/mgr/mgr_module.py", line 1337, in _handle_command >>> return CLICommand.COMMANDS[cmd['prefix']].call(self, cmd, inbuf) >>> File "/usr/share/ceph/mgr/mgr_module.py", line 389, in call >>> return self.func(mgr, **kwargs) >>> File "/usr/share/ceph/mgr/dashboard/module.py", line 385, in >> set_ssl_certificate_key >>> self.set_store('key', inbuf.decode()) >>> AttributeError: 'str' object has no attribute 'decode' >>> >>> $ ceph dashboard set-ssl-certificate -i /data/ceph/conf/ceph.crt >>> Error EINVAL: Traceback (most recent call last): >>> File "/usr/share/ceph/mgr/mgr_module.py", line 1337, in _handle_command >>> return CLICommand.COMMANDS[cmd['prefix']].call(self, cmd, inbuf) >>> File "/usr/share/ceph/mgr/mgr_module.py", line 389, in call >>> return self.func(mgr, **kwargs) >>> File "/usr/share/ceph/mgr/dashboard/module.py", line 372, in >> set_ssl_certificate >>> self.set_store('crt', inbuf.decode()) >>> AttributeError: 'str' object has no attribute 'decode' >>> >>> >>> They are both PEM encoded files: >>> file /data/ceph/conf/ceph.key /data/ceph/conf/ceph.crt >>> /data/ceph/conf/ceph.key: PEM RSA private key >>> /data/ceph/conf/ceph.crt: PEM certificate >>> >>> What format does this command expect ? >>> >>> That error happens on Centos 8.3.2011 with ceph-mgr-16.2.1-0.el8.x86_64, >> downloaded directly from ceph. >>> _______________________________________________ >>> ceph-users mailing list -- ceph-users@xxxxxxx >>> To unsubscribe send an email to ceph-users-leave@xxxxxxx >> >> _______________________________________________ >> ceph-users mailing list -- ceph-users@xxxxxxx >> To unsubscribe send an email to ceph-users-leave@xxxxxxx >> > _______________________________________________ > ceph-users mailing list -- ceph-users@xxxxxxx > To unsubscribe send an email to ceph-users-leave@xxxxxxx _______________________________________________ ceph-users mailing list -- ceph-users@xxxxxxx To unsubscribe send an email to ceph-users-leave@xxxxxxx
 |