Hi Android Building,

I am following the site 
(https://groups.google.com/g/android-building/c/EJradKEiPl0) to build AOSP 
11 with Google RBE service. I have created the service account and enabled 
the "Remote Build Execution API" service in Google Cloud. After setup env 
variables, the make always show a TLS CA cert issue. Could you show me the 
correct way to get the TLS CA cert for Google RBE service?Thanks!

Below is env variables setup:
    export RBE_service=remotebuildexecution.googleapis.com:443
    export RBE_tls_ca_cert=rbe.crt
    export RBE_use_rpc_credentials=true
    export 
GOOGLE_APPLICATION_CREDENTIALS=loyal-theater-204209-c0471ad7c674.json
    ...

I got rbe.cert using command "openssl s_client -connect 
remotebuildexecution.googleapis.com:443 -showcerts" and converted to DER 
format, and loyal-theater-204209-c0471ad7c674.json is my service account 
key file.

Afte make, it always output below error, seems the TLS CA cert is wrong:
E0626 12:33:13.387181   10559 bootstrap.go:91] Unable to start reproxy: 
F0626 12:32:53.444195   10569 main.go:122] Error connecting to remote 
execution client: Could not create TLS config: failed to load TLS CA 
certificates from rbe.crt

I tried several ways to get the TLS CA cert, neither works, it always show 
above error. Really appreciated your help on it. Thank! 

Regards,
John

-- 
-- 
You received this message because you are subscribed to the "Android Building" 
mailing list.
To post to this group, send email to [email protected]
To unsubscribe from this group, send email to
[email protected]
For more options, visit this group at
http://groups.google.com/group/android-building?hl=en

--- 
You received this message because you are subscribed to the Google Groups 
"Android Building" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To view this discussion on the web visit 
https://groups.google.com/d/msgid/android-building/7644f3da-d8d8-40a6-9b87-ec679dbc0660n%40googlegroups.com.

Reply via email to