Alexey Serbin created KUDU-3786:
-----------------------------------
Summary: Refresh TLS certificates involved in
SecurityITest.TestJwtMiniCluster
Key: KUDU-3786
URL: https://issues.apache.org/jira/browse/KUDU-3786
Project: Kudu
Issue Type: Task
Reporter: Alexey Serbin
The SecurityITest.TestJwtMiniCluster scenario in security-itest.cc recently
started failing with an error on expired certificate, see below. It's
necessary to refresh the certificate.
{noformat}
SecurityITest.TestJwtMiniCluster:
/data0/somelongdirectorytoavoidrpathissues/src/kudu/src/kudu/integration-tests/security-itest.cc:597:
Failure
Failed
Bad status: Runtime error: Could not connect to the cluster: Client connection
negotiation failed: client connection to 127.0.98.126:39167: FATAL_INVALID_JWT:
Not authorized: Failed to load JWKS: Error downloading JWKS from
'https://localhost:42069/jwks.json': curl error: SSL peer certificate or SSH
remote key was not OK: SSL certificate problem: certificate has expired
Google Test trace:
/data0/somelongdirectorytoavoidrpathissues/src/kudu/src/kudu/integration-tests/security-itest.cc:593:
Valid JWT
{noformat}
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
