Skip to content
This repository has been archived by the owner on Nov 7, 2022. It is now read-only.

agent -> collector TLS does not seem to work #596

Closed
tcolgate opened this issue Jun 28, 2019 · 3 comments
Closed

agent -> collector TLS does not seem to work #596

tcolgate opened this issue Jun 28, 2019 · 3 comments

Comments

@tcolgate
Copy link

tcolgate commented Jun 28, 2019

Starting the collector with:

receivers:
  opencensus:
    port: 55778
    tls_credentials:
      key_file: server-key.pem
      cert_file: server.pem

Does not seem to work as advertised. Attempting I can't get an agent to talk to it. On further investigation, port 55778 does not appear to be able to recieve https connection. Testing via openssl s_client implies it is not a TLS port). cmux appears to be breaking this.
If I short circuit out cmux and change the collector.startServer to

errChan <- ocr.serverGRPC.Serve(ocr.ln)

Then an unmodified agent, with correct creds can talk to the collector.

@tcolgate
Copy link
Author

I'm attempting to implement mTLS, there are further issues there (the agent can't be given a key, and the server does not attempt to verify client certs). I'm happy to make the required changes for mTLS, but I'm sure how to get cmux to do what is needed here.

@tonglil
Copy link

tonglil commented Mar 19, 2021

Also trying to get mutual tls to work from a go app instrumented with ocagent to the OC Agent (doesn't the receiver here need the CA cert as well?)

@dashpole
Copy link
Contributor

dashpole commented Nov 7, 2022

This repository is now archived, and is succeeded by https://github.com/open-telemetry/opentelemetry-collector.

@dashpole dashpole closed this as completed Nov 7, 2022
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

No branches or pull requests

3 participants