> This looks a bit like https://issues.apache.org/jira/browse/TS-1198.

I saw TS-1198, but believe my certificates are *not* missing..

% grep ^dest_ip /etc/trafficserver/ssl_multicert.config
dest_ip=109.247.114.202
ssl_cert_name=/etc/pki/tls/certs/STAR_services_EXAMPLE_net.crt
ssl_key_name=/etc/pki/tls/private/STAR_services_EXAMPLE_net.key
ssl_ca_name=/etc/pki/tls/certs/STAR_services_EXAMPLE_net.ca-bundle
dest_ip=2a01:798:0:8008::202
ssl_cert_name=/etc/pki/tls/certs/STAR_services_EXAMPLE_net.crt
ssl_key_name=/etc/pki/tls/private/STAR_services_EXAMPLE_net.key
ssl_ca_name=/etc/pki/tls/certs/STAR_services_EXAMPLE_net.ca-bundle

And verify in filesystem:

-rw-r--r--. 1 root root 1509 2012-07-07 16:00
/etc/pki/tls/certs/STAR_services_EXAMPLE_net.ca-bundle
-rw-r--r--. 1 root root 1509 2012-07-07 16:00
/etc/pki/tls/certs/STAR_services_EXAMPLE_net.ca-bundle
-rw-r--r--. 1 root root 1939 2012-07-06 16:09
/etc/pki/tls/certs/STAR_services_EXAMPLE_net.crt
-rw-r--r--. 1 root root 1939 2012-07-06 16:09
/etc/pki/tls/certs/STAR_services_EXAMPLE_net.crt
-rw-r-----. 1 root ats   891 2012-07-06 16:09
/etc/pki/tls/private/STAR_services_EXAMPLE_net.key
-rw-r-----. 1 root ats   891 2012-07-06 16:09
/etc/pki/tls/private/STAR_services_EXAMPLE_net.key

I don't know how to trigger the problem yet, but it seems to happen
every few days..


Could it be related to the fact that we use keepalived to move
IP-adresses between servers? i.e. the dest_ip configured in
ssl_multicert.config might not be available on the server ATS is
running on, and it might also suddenly appear/disappear if something
is started/stopped on one of the servers.


> Does is reproduce with ATS from trunk?

Haven't tried that yet...



   -jf

Reply via email to