opencensus-service icon indicating copy to clipboard operation
opencensus-service copied to clipboard

agent -> collector TLS does not seem to work

Open tcolgate opened this issue 5 years ago • 2 comments

Starting the collector with:

receivers:
  opencensus:
    port: 55778
    tls_credentials:
      key_file: server-key.pem
      cert_file: server.pem

Does not seem to work as advertised. Attempting I can't get an agent to talk to it. On further investigation, port 55778 does not appear to be able to recieve https connection. Testing via openssl s_client implies it is not a TLS port). cmux appears to be breaking this. If I short circuit out cmux and change the collector.startServer to

errChan <- ocr.serverGRPC.Serve(ocr.ln)

Then an unmodified agent, with correct creds can talk to the collector.

tcolgate avatar Jun 28 '19 14:06 tcolgate

I'm attempting to implement mTLS, there are further issues there (the agent can't be given a key, and the server does not attempt to verify client certs). I'm happy to make the required changes for mTLS, but I'm sure how to get cmux to do what is needed here.

tcolgate avatar Jun 28 '19 14:06 tcolgate

Also trying to get mutual tls to work from a go app instrumented with ocagent to the OC Agent (doesn't the receiver here need the CA cert as well?)

tonglil avatar Mar 19 '21 01:03 tonglil

This repository is now archived, and is succeeded by https://github.com/open-telemetry/opentelemetry-collector.

dashpole avatar Nov 07 '22 15:11 dashpole