Error in tools/configure_octavia.sh

[Marco Marino]

Hi,
I think there is a little error in configure_octavia.sh. At the beginning of the file we have:

mkdir -p demoCA/newcerts # <-- lowercase 'd' in 'demoCA'
touch demoCA/index.txt
touch demoCA/index.txt.attr

but the execution of the script fails with:
...
+ openssl ca -passin pass:foobar -config /etc/ssl/openssl.cnf -cert controller_ca.pem -keyfile controller_ca_key.pem -create_serial -batch -in controller.csr -days 365 -out controller_cert.pem
Using configuration from /etc/ssl/openssl.cnf
ca: ./DemoCA/newcerts is not a directory
./DemoCA/newcerts: No such file or directory

This happens because in /etc/ssl/openssl.cnf we have:
...
[ CA_default ]
dir = ./DemoCA # Where everything is kept <--- Capital D here!
....

So, in order to remain "in compliance" with the openssl.cnf file, the proposed solution is to change the script in this way:
mkdir -p DemoCA/newcerts
touch DemoCA/index.txt
touch DemoCA/index.txt.attr

Thank you.
Regards,
Marco

[Edward Hope-Morley (hopem)]

Hi @marino-mrc that file is managed by the openssl package not stsstack-bundles:

ubuntu@openssl:~$ dpkg -S /etc/ssl/openssl.cnf
openssl: /etc/ssl/openssl.cnf
ubuntu@openssl:~$ grep -i demo /etc/ssl/openssl.cnf
dir = ./demoCA # Where everything is kept
dir = ./demoCA # TSA root directory
ubuntu@openssl:~$ dpkg -l| grep "ii openssl"
ii openssl 1.1.1j-1ubuntu3.5 amd64 Secure Sockets Layer toolkit - cryptographic utility

And as you can see the default version uses "demoCA" so I assume your is different because you have modified it. Therefore I don't believe this is something we need to fix in stsstack-bundles.