etcdmanager icon indicating copy to clipboard operation
etcdmanager copied to clipboard

[BUG] Could not perform operation. Error: Error: 14 UNAVAILABLE: Empty update

Open bla-ckbox opened this issue 4 years ago • 15 comments

Describe the bug can not save profile / test connection

To Reproduce Save profile with Auth and Secure connection

Desktop

  • Windows 10
  • ETCD manager version 1.2.0

Additional context

  • etcd Version 3.4.13
{
  "profiles": [
    {
      "etcd": {
        "hosts": "172.18.16.190",
        "dialTimeout": 30000,
        "retry": false,
        "port": 2379,
        "ssl": {
          "enabled": true,
          "certificate": "C:\\Temp\\client.pem",
          "certKey": "C:\\Temp\\client-key.pem",
          "certChain": "C:\\Temp\\ca.pem"
        }
      },
      "config": {
        "language": "en",
        "animateBg": false,
        "background": true,
        "name": "default"
      },
      "watchers": {
        "autoload": false,
        "reconnects": true,
        "disconnects": true,
        "error": true
      },
      "etcdAuth": {
        "username": "foobar",
        "password": "********"
      },
      "credentials": {
        "rootCertificate": {
          "type": "Buffer",
          "data": [...truncated...]
        },
        "privateKey": {
          "type": "Buffer",
          "data": [...truncated...]
        }
      }
    }
  ]
}

bla-ckbox avatar Nov 26 '20 15:11 bla-ckbox

+1

Bonehead5338 avatar Nov 28 '20 19:11 Bonehead5338

+1

raf924 avatar Dec 08 '20 23:12 raf924

Same error on me, couldn't find workaround yet. With etcdctl it works.

i4004 avatar Feb 10 '21 11:02 i4004

+1

mrysbekov avatar Feb 27 '21 17:02 mrysbekov

Same error on me,can you help me.

yangtingtools avatar Mar 03 '21 07:03 yangtingtools

Same error on me,can you help me.

smile-luobin avatar Mar 31 '21 09:03 smile-luobin

Thanks for reporting this, I will look into this.

Currently I have little for this project but I will get back to it as soon as I can.

In the meantime, PRs are welcome :) If anyone wants to help, please contact me!. Comment below and mention me.

Thanks in advance!

gtamas avatar Jun 07 '21 17:06 gtamas

+1

daviesluke avatar Jun 29 '21 13:06 daviesluke

The same issue here

AlexBar avatar Sep 14 '21 10:09 AlexBar

Hi, same error here under Ubuntu 20.04. What I notice is that there is an error message in the console window when I try to save the profile:

E0922 13:22:44.589153685 14203 ssl_transport_security.cc:1245] Handshake failed with fatal error SSL_ERROR_SSL: error:1000007d:SSL routines:OPENSSL_internal:CERTIFICATE_VERIFY_FAILED.

Our etcd hosts do use SSL-Certs provided by an company internal CA. Those Rootcerts are in my system keystore, but of course will never be publically available. As far as I know snap is not able to use the system certificate store?

What is a bit misleading is: The connection test is successful. And I entered an HTTPS-URL. So I assume this really just checks network connectivity and NOT additionally the SSL Handshake? Would be nice if the test would do both. Oh, and of course an option to add custom CA certs :-)

I guess what happens is (without looking at any code): Test connection only verifies network connectivity. Upon clicking "save profile" etcd-manager tries to actually connect to the etcd host(s) and gather the required information to add it to the profile. This fails at the SSL Handshake and we end up with this lovely error message. :smile:

Problems with CA certs which are not in the official Browser CAB Truststore seem like a common issue with snaps: https://forum.snapcraft.io/t/using-the-system-certificate-authorities/10732/10

ChrLau avatar Sep 22 '21 11:09 ChrLau

I tried to add the CA cert to snap via: snap set system store-certs.cert1="$(cat /path/to/mycert)"

After reading: https://forum.snapcraft.io/t/system-options/87

Still the same error. An mount --bind /etc/ssl /snap/core18/current/etc/ssl/ also didn't work.

ChrLau avatar Sep 22 '21 12:09 ChrLau

@ChrLau even if you added the SSL certs it still won't work. It's an issue with the software. If we couldn't make it work without snap, you won't get it working with snap.

onedr0p avatar Sep 22 '21 12:09 onedr0p

@onedr0p Well it was just speculation from my side and I was willing to spent the time trying. Additionally I saw noone trying similiar steps/workarounds here, therefor I posted it here so other people can skip trying these steps.

But given the fact that this software is unmaintained for 2 years we decided against it, even if there will be a workaround some time in the future..

ChrLau avatar Sep 23 '21 10:09 ChrLau

Same issue on macos ventura 13.2 (22D49) M1

glebyan avatar Feb 16 '23 14:02 glebyan

Same issue on Macos (2023-07-26) connecting with client.crt, client.key and ca.crt.

ZhangSIming-blyq avatar Jul 26 '23 07:07 ZhangSIming-blyq