Hi All ,
We had to add the path of certificates in worker.py in lava_dispatcher , as below l and restart the worker ,
######### # Globals ######### # Create the logger that will be configured later logging.Formatter.convert = time.gmtime LOG = logging.getLogger("lava-worker") FORMAT = "%(asctime)-15s %(levelname)7s %(message)s"
SESSION = requests.Session() SESSION.verify = '<Path to the Certificates>'
By adding the certificate path in worker.py file , connection of worker with HTTPS enabled lava-server instance was successful. Is this the right method to achieve the results , or is there any other method with which we can do the same?
Thanks and regards , Shivaschandra K L
From: K L, Shivaschandra (DI SW CAS ES EPT OPS&QA PBU) Sent: 29 March 2022 08:02 PM To: 'lava-users@lists.lavasoftware.org' lava-users@lists.lavasoftware.org Cc: Koturappa, Hemanth Hemanth_Koturappa@mentor.com Subject: HTTPS configuration for LAVA Server.
Hi All ,
We had lava-server running on HTTP , we needed to migrate to HTTPS for security reasons. We have configured our lava-server for HTTPS by configuring apache2 with root and issuing SSL certificates. Post migration from HTTP to HTTPS, lava server works fine , but we are facing issues while worker tries to connect to lava server, Following is the error that we are getting in lava-worker.log
ERROR -> server error: code 503 2022-03-29 19:38:15,598 DEBUG --> HTTPSConnectionPool(host='*.com', port=443): Max retries exceeded with url: /scheduler/internal/v1/workers/<worker-name> /?version=2021.10 (Caused by SSLError(SSLCertVerificationError(1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: unable to get local issuer certificate (_ssl.c:1123)')))
Are there any configurations that we have to do on the worker side to enable the sever - worker communication to be up and running. If there are any documentations that need to be followed to configure HTTPS , request to provide the documentation for the same.
Thanks and regards Shivaschandra K L