The Wayback Machine - https://web.archive.org/web/20200627192348/https://github.com/dgraph-io/dgraph/issues/5350
Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

TLS Options Documentation Not Working with v20.03.1 #5350

Open
darkn3rd opened this issue May 2, 2020 · 2 comments
Open

TLS Options Documentation Not Working with v20.03.1 #5350

darkn3rd opened this issue May 2, 2020 · 2 comments

Comments

@darkn3rd
Copy link
Contributor

@darkn3rd darkn3rd commented May 2, 2020

Documentation

The documentation for TLS Options does not work in curent version v20.03.1

Specifically this no longer works:

# Now, connect to server using TLS
$ dgraph live --tls_dir tls -s 21million.schema -f 21million.rdf.gz

Workaround

The correct command depends on how the certificate was setup, and also the host that the service is running on. I was able to get it working with this:

dgraph live \
  --tls_cacert ./tls/ca.crt \
  --tls_cert ./tls/client.user.crt \
  --tls_key ./tls/client.user.key \
  --tls_server_name "$(hostname -f)" \
  -s 21million.schema \
  -f 21million.rdf.gz

I setup my environment with this:

curl -sSf https://get.dgraph.io | VERSION="v20.03.1" bash
dgraph cert
dgraph cert -n $(hostname -f)
dgraph cert -c user
dgraph zero --my="$(hostname -f):5080" --idx 1
dgraph alpha --my=$(hostname -f):7080 \
 --zero $(hostname -f):5080 \
  --lru_mb 2048 \
  --tls_dir=./tls \
  --tls_client_auth=REQUIREANDVERIFY
@darkn3rd
Copy link
Contributor Author

@darkn3rd darkn3rd commented May 7, 2020

I was hoping an engineer could look at this, verify if this was a feature at all. But in mean time editing documentation to show another path.

@gumupaier
Copy link

@gumupaier gumupaier commented Jun 24, 2020

I had the same problem,

Error: unknown flag: --tls_dir

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
You can’t perform that action at this time.