Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

CertService and certs_warn process should provide better error diagnostics #37

Open
JimTomlinson-UW opened this issue Apr 11, 2023 · 1 comment

Comments

@JimTomlinson-UW
Copy link
Contributor

Certificate renewal via certservice (INC2655945) was broken due to 'overzealous cleanup' of https://wiki.cac.washington.edu/display/Tools/UWNetidsFromFQDN (REF0045270). This also broke the certs_warn process on iamtools21
(on iamtools21, iamcert's crontab includes
01 01 * * * /data/local/cs/util/certs_warn.sh >> /dev/null 2>&1
)
Errors when retrieving netids associated with a FQDN via the DAW webservice should be surfaced and logged in a much more meaningful, understandable manner by both certservice and the certs_warn process.
For example, rather than listing expiring certificates, when the DAW call fails the resulting email to [email protected] simply contained (literally)

'netids'
'netids'
...
This may need to be two issues, one to improve certservice and one to improve certs_warn.

@JimTomlinson-UW
Copy link
Contributor Author

BTW, on iamtools21 the DAW service doc'ed at https://wiki.cac.washington.edu/display/Tools/UWNetidsFromFQDN can be tested via
wget -q -O - --certificate=/data/local/cs/gws.cac-uw.crt --private-key=/data/local/cs/gws.cac-uw.key https://api.tools.s.uw.edu/daw/json/DNS_TOOLS/v2/UWNetidsFromFQDN/fqdn/[FQDN]

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant