Re: [ovs-discuss] SSL error

2017-05-10 Thread y...@panath.cn
Very grateful to you, your reply to solve my confusion!



y...@panath.cn
 
From: Lance Richardson
Date: 2017-05-10 20:45
To: ych
CC: ovs-discuss
Subject: Re: [ovs-discuss] SSL error
> From: y...@panath.cn
> To: "ovs-discuss" 
> Sent: Wednesday, 10 May, 2017 5:05:36 AM
> Subject: [ovs-discuss] SSL error
> 
> Hi everyone,
> After install openvswitch-2.6.1, prompt SSL error, Does anyone know what
> reason is this?
> 
> root@ubuntu:/home/ych/openvswitch-2.6.1# ./boot.sh
> root@ubuntu:/home/ych/openvswitch-2.6.1# ./configure
> --with-linux=/lib/modules/$(uname -r)/build
> root@ubuntu:/home/ych/openvswitch-2.6.1# make
> root@ubuntu:/home/ych/openvswitch-2.6.1# make install
> root@ubuntu:/home/ych/openvswitch-2.6.1# make modules_install
> =
> root@ubuntu:/home/ych/openvswitch-2.6.1# sudo make modules_install
> cd datapath/linux && make modules_install
> make[1]: Entering directory '/home/ych/openvswitch-2.6.1/datapath/linux'
> make -C /lib/modules/4.4.0-75-generic/build
> M=/home/ych/openvswitch-2.6.1/datapath/linux modules_install
> make[2]: Entering directory '/usr/src/linux-headers-4.4.0-75-generic'
> INSTALL /home/ych/openvswitch-2.6.1/datapath/linux/openvswitch.ko
> At main.c:222:
> - SSL error:02001002:system library:fopen:No such file or directory:
> bss_file.c:175
> - SSL error:2006D080:BIO routines:BIO_new_file:no such file: bss_file.c:178
> sign-file: certs/signing_key.pem: No such file or directory
> INSTALL /home/ych/openvswitch-2.6.1/datapath/linux/vport-geneve.ko
> At main.c:222:
> - SSL error:02001002:system library:fopen:No such file or directory:
> bss_file.c:175
> - SSL error:2006D080:BIO routines:BIO_new_file:no such file: bss_file.c:178
> sign-file: certs/signing_key.pem: No such file or directory
> INSTALL /home/ych/openvswitch-2.6.1/datapath/linux/vport-gre.ko
> At main.c:222:
> - SSL error:02001002:system library:fopen:No such file or directory:
> bss_file.c:175
> - SSL error:2006D080:BIO routines:BIO_new_file:no such file: bss_file.c:178
> sign-file: certs/signing_key.pem: No such file or directory
> INSTALL /home/ych/openvswitch-2.6.1/datapath/linux/vport-lisp.ko
> At main.c:222:
> - SSL error:02001002:system library:fopen:No such file or directory:
> bss_file.c:175
> - SSL error:2006D080:BIO routines:BIO_new_file:no such file: bss_file.c:178
> sign-file: certs/signing_key.pem: No such file or directory
> INSTALL /home/ych/openvswitch-2.6.1/datapath/linux/vport-stt.ko
> At main.c:222:
> - SSL error:02001002:system library:fopen:No such file or directory:
> bss_file.c:175
> - SSL error:2006D080:BIO routines:BIO_new_file:no such file: bss_file.c:178
> sign-file: certs/signing_key.pem: No such file or directory
> INSTALL /home/ych/openvswitch-2.6.1/datapath/linux/vport-vxlan.ko
> At main.c:222:
> - SSL error:02001002:system library:fopen:No such file or directory:
> bss_file.c:175
> - SSL error:2006D080:BIO routines:BIO_new_file:no such file: bss_file.c:178
> sign-file: certs/signing_key.pem: No such file or directory
> DEPMOD 4.4.0-75-generic
> make[2]: Leaving directory '/usr/src/linux-headers-4.4.0-75-generic'
> depmod `sed -n 's/#define UTS_RELEASE "\([^"]*\)"/\1/p'
> /lib/modules/4.4.0-75-generic/build/include/generated/utsrelease.h`
> make[1]: Leaving directory '/home/ych/openvswitch-2.6.1/datapath/linux'
> 
> 
> 
> Best wishes!
> 
> 
> y...@panath.cn
> 
 
It seems your kernel is configured with CONFIG_MODULE_SIG=y, so "make
modules_install" is attempting to add a signature to each kernel module,
but this is failing because the signing key certificate is not present.
The signing key certificate is most often created as part of the base
kernel build, and not included in distribution packages (for obvious
reasons!), so I suspect this is a common situation.
 
Based on looking at the kernel makefiles, this won't be treated as a
fatal error and in fact from your "make modules_install" output it
looks like it completed successfully.
 
I think these errors can safely be ignored.
 
Regards,
 
   Lance Richardson
___
discuss mailing list
disc...@openvswitch.org
https://mail.openvswitch.org/mailman/listinfo/ovs-discuss


Re: [ovs-discuss] Possible issue/bug at Open vSwitch and ovsdb.

2017-05-10 Thread Tulio Ribeiro
Hi guys, sorry to bother you again and send this direct message, but I 
did a test *without* using Mininet, and the problem/behavior persists.


Could someone try to test this, please?

It is necessary one active controller, I've tested with Floodlight 
controller.


A simple way to verify is, open one term and execute
$watch sudo ovsdb-client dump Controller

In another term, execute this sequence of commands, and see what happens:

$sudo ovs-vsctl add-br s1
$sudo ovs-vsctl add-br s2
$sudo ovs-vsctl set-controller s1 tcp:192.168.1.215:6653
Wait 5 seconds, and execute:
$sudo ovs-vsctl set-controller s2 tcp:192.168.1.215:6653

You will see that *sec_since_connect* are the same, but should not be 
once I connected at different times.


Try to change the role of the controller,  need to change the data 
inside of < > with the appropriate value.
$sudo ovs-vsctl set  Controller *<975fb2ed-6354-45c1-ba12-3c2295bdee7b>* 
role=slave


The role gets back to master after some seconds, why it gets back to master?

I wrote this thread at OVS-Discuss list, but without success.
https://mail.openvswitch.org/pipermail/ovs-discuss/2017-April/044293.html

=

Another test that could be done, take a look at the information defined 
at fail_mode and role.


$sudo ovs-vsctl add-br s1 -- set bridge s1 
other-config:datapath-id=0001 fail_mode=secure
$sudo ovs-vsctl add-br s2 -- set bridge s2 
other-config:datapath-id=0002 fail_mode=secure

$sudo ovs-vsctl set-controller s1 tcp:192.168.1.215:6653
$sudo ovs-vsctl set-controller s2 tcp:192.168.1.215:6653
$sudo ovs-vsctl set Controller 3675a6b5-b9c5-4db3-91cd-ab5226045b56 
role=slave


Regards and many thanks.

: )

Att,

Tulio Ribeiro - LaSIGE.

On 04/26/2017 08:58 PM, Jarno Rajahalme wrote:
Have you tried the mining mailing lists? I haven’t used mininet for 
some years now, but this could be a mininet issue rather than an OVS 
issue.


  Jarno

On Apr 26, 2017, at 2:52 AM, Tulio Ribeiro 
> wrote:


Hi, sorry to bother you sending a direct e-mail, but I'm stuck for 
weeks at the same problem.

I did not find any way to circumvent this issue.

I wrote a question at ovs-discuss and ovs-dev but no one help-me.
https://mail.openvswitch.org/pipermail/ovs-discuss/2017-April/044293.html

I'm facing a little strange behavior.

Suppose that I have 4 switches.
The info showed in *sec_since_connect* (Controller table of ovsdb) 
should show information related with a specific switch, for instance,
if I disconnect s1 and reconnect (stop/start from mininet) the 
information should be different right?


When I monitor the table Controller from ovsdb and send a transaction 
to change some info there, the info is changed but it get back using 
the former info.


Would you please try a simple test?
The test is monitor the table Controller from ovsdb and stop and 
start just one switch, s1 for instance:


Monitor command:
$watch sudo ovsdb-client dump Controller

Mininet command:
$sudo mn --mac --controller=remote,ip=192.168.1.215,port=6653 --topo 
linear,4 --switch ovsk,protocols=OpenFlow14; sudo mn -c


mininet$ switch s1 stop
mininet$ switch s1 start

The value of *sec_since_connect* is the same for all switches...
Other point is, the role when I use two controller are the same as 
well, which means,

the last role_request from a Controller will update all switches roles.


I have tracked the messages between open vSwitch and ovsdb and I 
notice that the transaction created by open vSwicth regarding on a 
role request are been created using the same role for all switches.


Some useful info:
ovsdb-server (Open vSwitch) 2.7.0
ovs-vsctl (Open vSwitch) 2.7.0
DB Schema 7.14.0

Again, sorry to bother you sending a direct message.

Thanks a lot in advance.

Regards
--
Att,

Tulio Ribeiro - LaSIGE.




___
discuss mailing list
disc...@openvswitch.org
https://mail.openvswitch.org/mailman/listinfo/ovs-discuss


[ovs-discuss] is flow ufid persistent ?

2017-05-10 Thread Avi Cohen (A)
Hello,
Please can you help with this short question:
Is the unique  flow identifier (ufid)  persistent ? 
i.e. flow-a is in dp-cache with  ufid = 1000, then the flow is evicted from 
dp-cache , and after 5 minutes flow-a is reinstalled in dp-cache.  The question 
- is the 'new'  ufid = 1000 again ?
Best Regards
avi 
___
discuss mailing list
disc...@openvswitch.org
https://mail.openvswitch.org/mailman/listinfo/ovs-discuss


Re: [ovs-discuss] SSL error

2017-05-10 Thread Lance Richardson
> From: y...@panath.cn
> To: "ovs-discuss" 
> Sent: Wednesday, 10 May, 2017 5:05:36 AM
> Subject: [ovs-discuss] SSL error
> 
> Hi everyone,
> After install openvswitch-2.6.1, prompt SSL error, Does anyone know what
> reason is this?
> 
> root@ubuntu:/home/ych/openvswitch-2.6.1# ./boot.sh
> root@ubuntu:/home/ych/openvswitch-2.6.1# ./configure
> --with-linux=/lib/modules/$(uname -r)/build
> root@ubuntu:/home/ych/openvswitch-2.6.1# make
> root@ubuntu:/home/ych/openvswitch-2.6.1# make install
> root@ubuntu:/home/ych/openvswitch-2.6.1# make modules_install
> =
> root@ubuntu:/home/ych/openvswitch-2.6.1# sudo make modules_install
> cd datapath/linux && make modules_install
> make[1]: Entering directory '/home/ych/openvswitch-2.6.1/datapath/linux'
> make -C /lib/modules/4.4.0-75-generic/build
> M=/home/ych/openvswitch-2.6.1/datapath/linux modules_install
> make[2]: Entering directory '/usr/src/linux-headers-4.4.0-75-generic'
> INSTALL /home/ych/openvswitch-2.6.1/datapath/linux/openvswitch.ko
> At main.c:222:
> - SSL error:02001002:system library:fopen:No such file or directory:
> bss_file.c:175
> - SSL error:2006D080:BIO routines:BIO_new_file:no such file: bss_file.c:178
> sign-file: certs/signing_key.pem: No such file or directory
> INSTALL /home/ych/openvswitch-2.6.1/datapath/linux/vport-geneve.ko
> At main.c:222:
> - SSL error:02001002:system library:fopen:No such file or directory:
> bss_file.c:175
> - SSL error:2006D080:BIO routines:BIO_new_file:no such file: bss_file.c:178
> sign-file: certs/signing_key.pem: No such file or directory
> INSTALL /home/ych/openvswitch-2.6.1/datapath/linux/vport-gre.ko
> At main.c:222:
> - SSL error:02001002:system library:fopen:No such file or directory:
> bss_file.c:175
> - SSL error:2006D080:BIO routines:BIO_new_file:no such file: bss_file.c:178
> sign-file: certs/signing_key.pem: No such file or directory
> INSTALL /home/ych/openvswitch-2.6.1/datapath/linux/vport-lisp.ko
> At main.c:222:
> - SSL error:02001002:system library:fopen:No such file or directory:
> bss_file.c:175
> - SSL error:2006D080:BIO routines:BIO_new_file:no such file: bss_file.c:178
> sign-file: certs/signing_key.pem: No such file or directory
> INSTALL /home/ych/openvswitch-2.6.1/datapath/linux/vport-stt.ko
> At main.c:222:
> - SSL error:02001002:system library:fopen:No such file or directory:
> bss_file.c:175
> - SSL error:2006D080:BIO routines:BIO_new_file:no such file: bss_file.c:178
> sign-file: certs/signing_key.pem: No such file or directory
> INSTALL /home/ych/openvswitch-2.6.1/datapath/linux/vport-vxlan.ko
> At main.c:222:
> - SSL error:02001002:system library:fopen:No such file or directory:
> bss_file.c:175
> - SSL error:2006D080:BIO routines:BIO_new_file:no such file: bss_file.c:178
> sign-file: certs/signing_key.pem: No such file or directory
> DEPMOD 4.4.0-75-generic
> make[2]: Leaving directory '/usr/src/linux-headers-4.4.0-75-generic'
> depmod `sed -n 's/#define UTS_RELEASE "\([^"]*\)"/\1/p'
> /lib/modules/4.4.0-75-generic/build/include/generated/utsrelease.h`
> make[1]: Leaving directory '/home/ych/openvswitch-2.6.1/datapath/linux'
> 
> 
> 
> Best wishes!
> 
> 
> y...@panath.cn
> 

It seems your kernel is configured with CONFIG_MODULE_SIG=y, so "make
modules_install" is attempting to add a signature to each kernel module,
but this is failing because the signing key certificate is not present.
The signing key certificate is most often created as part of the base
kernel build, and not included in distribution packages (for obvious
reasons!), so I suspect this is a common situation.

Based on looking at the kernel makefiles, this won't be treated as a
fatal error and in fact from your "make modules_install" output it
looks like it completed successfully.

I think these errors can safely be ignored.

Regards,

   Lance Richardson
___
discuss mailing list
disc...@openvswitch.org
https://mail.openvswitch.org/mailman/listinfo/ovs-discuss


[ovs-discuss] SSL error

2017-05-10 Thread y...@panath.cn
Hi everyone,
After install openvswitch-2.6.1, prompt SSL error, Does anyone know what reason 
is this?

root@ubuntu:/home/ych/openvswitch-2.6.1#./boot.sh
root@ubuntu:/home/ych/openvswitch-2.6.1#./configure 
--with-linux=/lib/modules/$(uname -r)/build 
root@ubuntu:/home/ych/openvswitch-2.6.1#make
root@ubuntu:/home/ych/openvswitch-2.6.1#make install
root@ubuntu:/home/ych/openvswitch-2.6.1#make modules_install
=
root@ubuntu:/home/ych/openvswitch-2.6.1# sudo make modules_install
cd datapath/linux && make modules_install
make[1]: Entering directory '/home/ych/openvswitch-2.6.1/datapath/linux'
make -C /lib/modules/4.4.0-75-generic/build 
M=/home/ych/openvswitch-2.6.1/datapath/linux modules_install
make[2]: Entering directory '/usr/src/linux-headers-4.4.0-75-generic'
  INSTALL /home/ych/openvswitch-2.6.1/datapath/linux/openvswitch.ko
At main.c:222:
- SSL error:02001002:system library:fopen:No such file or directory: 
bss_file.c:175
- SSL error:2006D080:BIO routines:BIO_new_file:no such file: bss_file.c:178
sign-file: certs/signing_key.pem: No such file or directory
  INSTALL /home/ych/openvswitch-2.6.1/datapath/linux/vport-geneve.ko
At main.c:222:
- SSL error:02001002:system library:fopen:No such file or directory: 
bss_file.c:175
- SSL error:2006D080:BIO routines:BIO_new_file:no such file: bss_file.c:178
sign-file: certs/signing_key.pem: No such file or directory
  INSTALL /home/ych/openvswitch-2.6.1/datapath/linux/vport-gre.ko
At main.c:222:
- SSL error:02001002:system library:fopen:No such file or directory: 
bss_file.c:175
- SSL error:2006D080:BIO routines:BIO_new_file:no such file: bss_file.c:178
sign-file: certs/signing_key.pem: No such file or directory
  INSTALL /home/ych/openvswitch-2.6.1/datapath/linux/vport-lisp.ko
At main.c:222:
- SSL error:02001002:system library:fopen:No such file or directory: 
bss_file.c:175
- SSL error:2006D080:BIO routines:BIO_new_file:no such file: bss_file.c:178
sign-file: certs/signing_key.pem: No such file or directory
  INSTALL /home/ych/openvswitch-2.6.1/datapath/linux/vport-stt.ko
At main.c:222:
- SSL error:02001002:system library:fopen:No such file or directory: 
bss_file.c:175
- SSL error:2006D080:BIO routines:BIO_new_file:no such file: bss_file.c:178
sign-file: certs/signing_key.pem: No such file or directory
  INSTALL /home/ych/openvswitch-2.6.1/datapath/linux/vport-vxlan.ko
At main.c:222:
- SSL error:02001002:system library:fopen:No such file or directory: 
bss_file.c:175
- SSL error:2006D080:BIO routines:BIO_new_file:no such file: bss_file.c:178
sign-file: certs/signing_key.pem: No such file or directory
  DEPMOD  4.4.0-75-generic
make[2]: Leaving directory '/usr/src/linux-headers-4.4.0-75-generic'
depmod `sed -n 's/#define UTS_RELEASE "\([^"]*\)"/\1/p' 
/lib/modules/4.4.0-75-generic/build/include/generated/utsrelease.h`
make[1]: Leaving directory '/home/ych/openvswitch-2.6.1/datapath/linux'



Best wishes!



y...@panath.cn
___
discuss mailing list
disc...@openvswitch.org
https://mail.openvswitch.org/mailman/listinfo/ovs-discuss


[ovs-discuss] a struct to keep flow scores

2017-05-10 Thread Avi Cohen (A)
Hello,
I need to keep some score information per flow - which exist in the open-flow 
tables at user space , not necessarily in the data-path cache.
These scores are learned during flow dumping phase - but should be saved also 
when flow is evicted from data-path.
The udpif_key struct is not suitable for this since it exist only when flow 
exist in the data-path.
What is the suitable structure to keep this info ?
Best Regards
avi
___
discuss mailing list
disc...@openvswitch.org
https://mail.openvswitch.org/mailman/listinfo/ovs-discuss