-
Notifications
You must be signed in to change notification settings - Fork 58
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Tang server does not deliver keys #102
Comments
Can you please execute next command and paste output?: |
% Total % Received % Xferd Average Speed Time Time Time Current 0 0 0 0 0 0 0 0 --:--:-- --:--:-- --:--:-- 0 It's the same on two different servers running with ubuntu 22.04 |
Sorry, I can not figure out what the problem is. Which clevis version are you using? I will try to reproduce this and if I come to a conclusion, I will let you know |
I changed the port via [Socket] I have tried different ports now. After that the error message is different. Now the message is as following; How can I see the clevis version? |
Please, post the output of |
systemctl status tangd.socket Notice: journal has been rotated since unit was started, output may be incomplete. ls -ld /var/lib/tang/ |
The accepted connections did count up as I had the old error curl: (56) Recv failure: Connection reset by peer. Since I changed the port and switched back it does not count up anymore. |
Can you execute "curl" with verbose option, to try to see if there is more info there? curl --verbose http://localhost:7500/adv Also, check your /etc/hosts, as it is weird that it is trying to resolve localhost to a named host: Failed to connect to vpsmail.de port 7500 |
curl --verbose http://localhost:7500/adv
0 0 0 0 0 0 0 0 --:--:-- --:--:-- --:--:-- 0* Connected to localhost (127.0.0.1) port 7500 (#0)
|
Sorry, I can not figure out what the issue could be .... ¿do you have firewalld running? |
Hello, firewalld is running but the effect is the same on localhost (where firewalld has no effect) or when the port is open in firewalld for runtime and permanent configuration. I would assume that a closed port in firewall would not be a connection reset instead there would be no connection at all because the port would not be accessible at al. Currently I'm running Ubuntu 22.04.2. |
Seems to be a configuration setting. I have two servers running on Ubuntu 22.04.3 which are upgraded (not sure what the install version was 18 or maybe even earlier). And I have another one also 22.04.3 which I have installed later (maybe with 20.04). On this one this message is not showing up and I'm getting the key insteat of the curl error. This seems to be a config setting not directly tang related which I have not found so far. Output is identical apart the result: curl -v http://localhost:7500/adv
Not working Tang Server B - Ubuntu 22.04.3: curl -v http://localhost:7500/adv
0 0 0 0 0 0 0 0 --:--:-- --:--:-- --:--:-- 0
|
I have installed tang on ubuntu 22.04 LTS. I changed the port to 7500:
systemctl show tangd.socket -p Listen
Listen=[::]:7500 (Stream)
tangd.socket - Tang Server socket
Loaded: loaded (/lib/systemd/system/tangd.socket; enabled; vendor preset: enabled)
Drop-In: /etc/systemd/system/tangd.socket.d
└─port.conf
Active: active (listening) since Sat 2022-11-12 21:12:47 CET; 44min ago
Triggers: ● [email protected]:7500-127.0.0.1:58504.service
● [email protected]:7500-127.0.0.1:59830.service
Listen: [::]:7500 (Stream)
Accepted: 14; Connected: 0;
Tasks: 0 (limit: 35918)
Memory: 4.0K
CPU: 9ms
CGroup: /system.slice/tangd.socket
If I try the follwing:
tang-show-keys 7500
The result is this:
curl: (56) Recv failure: Connection reset by peer
I deactivated the firewall for test purposes but that makes not difference. And it should not be if this is a request on the same host.
The text was updated successfully, but these errors were encountered: