[DRBD-user] satellite daemon must non-3377 port for SSL?

[Rene Peinthor]

Hi!

I don't know why you think that the satellite listens on port 3377?
Here are the default port bindings:

    /*
     * Default ports
     */
    public static final int DFLT_CTRL_PORT_SSL = 3377;
    public static final int DFLT_CTRL_PORT_PLAIN = 3376;
    public static final int DFLT_STLT_PORT_SSL = 3367;
    public static final int DFLT_STLT_PORT_PLAIN = 3366;

It wouldn't make much sense to have a combined node, where you only can run
either a controller or satellite...
We have multiple setups where Controller and Satellite run on the same node.

Best regards
Rene

On Thu, Jul 2, 2020 at 7:02 AM Chad William Seys <cwseys at physics.wisc.edu>
wrote:

> Hi,
>    I have a "Combined" controller/satellite node which I'm trying to set
> up SSL on.
>    It appears that the controller binds port 3377 by default.  This is
> also the port the satellite listens to by default.  When the node is
> Combined, this causes problems connecting to the satellite daemon.
>    My hope was to have the controller bind to a non-3377 port so that
> one would not have to specify a non-default port when creating a node.
> However, I haven't been able to get the controller daemon to bind to
> anything but 3377.
> E.g. This does not work:
> # cat /etc/linstor/linstor_controller.toml
> [netcom]
>    type="ssl"
>    port=3388
>    server_certificate="/etc/linstor/ssl/keystore.jks"
>    trusted_certificates="/etc/linstor/ssl/certificates.jks"
>    key_password="linstor"
>    keystore_password="linstor"
>    truststore_password="linstor"
>    ssl_protocol="TLSv1.2"
>
>
> Thanks!
> Chad.
> _______________________________________________
> Star us on GITHUB: https://github.com/LINBIT
> drbd-user mailing list
> drbd-user at lists.linbit.com
> https://lists.linbit.com/mailman/listinfo/drbd-user
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.linbit.com/pipermail/drbd-user/attachments/20200702/2157c8ef/attachment.htm>