Re: [ovs-discuss] SSL error
Very grateful to you, your reply to solve my confusion! y...@panath.cn From: Lance Richardson Date: 2017-05-10 20:45 To: ych CC: ovs-discuss Subject: Re: [ovs-discuss] SSL error > From: y...@panath.cn > To: "ovs-discuss"> Sent: Wednesday, 10 May, 2017 5:05:36 AM > Subject: [ovs-discuss] SSL error > > Hi everyone, > After install openvswitch-2.6.1, prompt SSL error, Does anyone know what > reason is this? > > root@ubuntu:/home/ych/openvswitch-2.6.1# ./boot.sh > root@ubuntu:/home/ych/openvswitch-2.6.1# ./configure > --with-linux=/lib/modules/$(uname -r)/build > root@ubuntu:/home/ych/openvswitch-2.6.1# make > root@ubuntu:/home/ych/openvswitch-2.6.1# make install > root@ubuntu:/home/ych/openvswitch-2.6.1# make modules_install > = > root@ubuntu:/home/ych/openvswitch-2.6.1# sudo make modules_install > cd datapath/linux && make modules_install > make[1]: Entering directory '/home/ych/openvswitch-2.6.1/datapath/linux' > make -C /lib/modules/4.4.0-75-generic/build > M=/home/ych/openvswitch-2.6.1/datapath/linux modules_install > make[2]: Entering directory '/usr/src/linux-headers-4.4.0-75-generic' > INSTALL /home/ych/openvswitch-2.6.1/datapath/linux/openvswitch.ko > At main.c:222: > - SSL error:02001002:system library:fopen:No such file or directory: > bss_file.c:175 > - SSL error:2006D080:BIO routines:BIO_new_file:no such file: bss_file.c:178 > sign-file: certs/signing_key.pem: No such file or directory > INSTALL /home/ych/openvswitch-2.6.1/datapath/linux/vport-geneve.ko > At main.c:222: > - SSL error:02001002:system library:fopen:No such file or directory: > bss_file.c:175 > - SSL error:2006D080:BIO routines:BIO_new_file:no such file: bss_file.c:178 > sign-file: certs/signing_key.pem: No such file or directory > INSTALL /home/ych/openvswitch-2.6.1/datapath/linux/vport-gre.ko > At main.c:222: > - SSL error:02001002:system library:fopen:No such file or directory: > bss_file.c:175 > - SSL error:2006D080:BIO routines:BIO_new_file:no such file: bss_file.c:178 > sign-file: certs/signing_key.pem: No such file or directory > INSTALL /home/ych/openvswitch-2.6.1/datapath/linux/vport-lisp.ko > At main.c:222: > - SSL error:02001002:system library:fopen:No such file or directory: > bss_file.c:175 > - SSL error:2006D080:BIO routines:BIO_new_file:no such file: bss_file.c:178 > sign-file: certs/signing_key.pem: No such file or directory > INSTALL /home/ych/openvswitch-2.6.1/datapath/linux/vport-stt.ko > At main.c:222: > - SSL error:02001002:system library:fopen:No such file or directory: > bss_file.c:175 > - SSL error:2006D080:BIO routines:BIO_new_file:no such file: bss_file.c:178 > sign-file: certs/signing_key.pem: No such file or directory > INSTALL /home/ych/openvswitch-2.6.1/datapath/linux/vport-vxlan.ko > At main.c:222: > - SSL error:02001002:system library:fopen:No such file or directory: > bss_file.c:175 > - SSL error:2006D080:BIO routines:BIO_new_file:no such file: bss_file.c:178 > sign-file: certs/signing_key.pem: No such file or directory > DEPMOD 4.4.0-75-generic > make[2]: Leaving directory '/usr/src/linux-headers-4.4.0-75-generic' > depmod `sed -n 's/#define UTS_RELEASE "\([^"]*\)"/\1/p' > /lib/modules/4.4.0-75-generic/build/include/generated/utsrelease.h` > make[1]: Leaving directory '/home/ych/openvswitch-2.6.1/datapath/linux' > > > > Best wishes! > > > y...@panath.cn > It seems your kernel is configured with CONFIG_MODULE_SIG=y, so "make modules_install" is attempting to add a signature to each kernel module, but this is failing because the signing key certificate is not present. The signing key certificate is most often created as part of the base kernel build, and not included in distribution packages (for obvious reasons!), so I suspect this is a common situation. Based on looking at the kernel makefiles, this won't be treated as a fatal error and in fact from your "make modules_install" output it looks like it completed successfully. I think these errors can safely be ignored. Regards, Lance Richardson ___ discuss mailing list disc...@openvswitch.org https://mail.openvswitch.org/mailman/listinfo/ovs-discuss
Re: [ovs-discuss] Possible issue/bug at Open vSwitch and ovsdb.
Hi guys, sorry to bother you again and send this direct message, but I did a test *without* using Mininet, and the problem/behavior persists. Could someone try to test this, please? It is necessary one active controller, I've tested with Floodlight controller. A simple way to verify is, open one term and execute $watch sudo ovsdb-client dump Controller In another term, execute this sequence of commands, and see what happens: $sudo ovs-vsctl add-br s1 $sudo ovs-vsctl add-br s2 $sudo ovs-vsctl set-controller s1 tcp:192.168.1.215:6653 Wait 5 seconds, and execute: $sudo ovs-vsctl set-controller s2 tcp:192.168.1.215:6653 You will see that *sec_since_connect* are the same, but should not be once I connected at different times. Try to change the role of the controller, need to change the data inside of < > with the appropriate value. $sudo ovs-vsctl set Controller *<975fb2ed-6354-45c1-ba12-3c2295bdee7b>* role=slave The role gets back to master after some seconds, why it gets back to master? I wrote this thread at OVS-Discuss list, but without success. https://mail.openvswitch.org/pipermail/ovs-discuss/2017-April/044293.html = Another test that could be done, take a look at the information defined at fail_mode and role. $sudo ovs-vsctl add-br s1 -- set bridge s1 other-config:datapath-id=0001 fail_mode=secure $sudo ovs-vsctl add-br s2 -- set bridge s2 other-config:datapath-id=0002 fail_mode=secure $sudo ovs-vsctl set-controller s1 tcp:192.168.1.215:6653 $sudo ovs-vsctl set-controller s2 tcp:192.168.1.215:6653 $sudo ovs-vsctl set Controller 3675a6b5-b9c5-4db3-91cd-ab5226045b56 role=slave Regards and many thanks. : ) Att, Tulio Ribeiro - LaSIGE. On 04/26/2017 08:58 PM, Jarno Rajahalme wrote: Have you tried the mining mailing lists? I haven’t used mininet for some years now, but this could be a mininet issue rather than an OVS issue. Jarno On Apr 26, 2017, at 2:52 AM, Tulio Ribeiro> wrote: Hi, sorry to bother you sending a direct e-mail, but I'm stuck for weeks at the same problem. I did not find any way to circumvent this issue. I wrote a question at ovs-discuss and ovs-dev but no one help-me. https://mail.openvswitch.org/pipermail/ovs-discuss/2017-April/044293.html I'm facing a little strange behavior. Suppose that I have 4 switches. The info showed in *sec_since_connect* (Controller table of ovsdb) should show information related with a specific switch, for instance, if I disconnect s1 and reconnect (stop/start from mininet) the information should be different right? When I monitor the table Controller from ovsdb and send a transaction to change some info there, the info is changed but it get back using the former info. Would you please try a simple test? The test is monitor the table Controller from ovsdb and stop and start just one switch, s1 for instance: Monitor command: $watch sudo ovsdb-client dump Controller Mininet command: $sudo mn --mac --controller=remote,ip=192.168.1.215,port=6653 --topo linear,4 --switch ovsk,protocols=OpenFlow14; sudo mn -c mininet$ switch s1 stop mininet$ switch s1 start The value of *sec_since_connect* is the same for all switches... Other point is, the role when I use two controller are the same as well, which means, the last role_request from a Controller will update all switches roles. I have tracked the messages between open vSwitch and ovsdb and I notice that the transaction created by open vSwicth regarding on a role request are been created using the same role for all switches. Some useful info: ovsdb-server (Open vSwitch) 2.7.0 ovs-vsctl (Open vSwitch) 2.7.0 DB Schema 7.14.0 Again, sorry to bother you sending a direct message. Thanks a lot in advance. Regards -- Att, Tulio Ribeiro - LaSIGE. ___ discuss mailing list disc...@openvswitch.org https://mail.openvswitch.org/mailman/listinfo/ovs-discuss
[ovs-discuss] is flow ufid persistent ?
Hello, Please can you help with this short question: Is the unique flow identifier (ufid) persistent ? i.e. flow-a is in dp-cache with ufid = 1000, then the flow is evicted from dp-cache , and after 5 minutes flow-a is reinstalled in dp-cache. The question - is the 'new' ufid = 1000 again ? Best Regards avi ___ discuss mailing list disc...@openvswitch.org https://mail.openvswitch.org/mailman/listinfo/ovs-discuss
Re: [ovs-discuss] SSL error
> From: y...@panath.cn > To: "ovs-discuss"> Sent: Wednesday, 10 May, 2017 5:05:36 AM > Subject: [ovs-discuss] SSL error > > Hi everyone, > After install openvswitch-2.6.1, prompt SSL error, Does anyone know what > reason is this? > > root@ubuntu:/home/ych/openvswitch-2.6.1# ./boot.sh > root@ubuntu:/home/ych/openvswitch-2.6.1# ./configure > --with-linux=/lib/modules/$(uname -r)/build > root@ubuntu:/home/ych/openvswitch-2.6.1# make > root@ubuntu:/home/ych/openvswitch-2.6.1# make install > root@ubuntu:/home/ych/openvswitch-2.6.1# make modules_install > = > root@ubuntu:/home/ych/openvswitch-2.6.1# sudo make modules_install > cd datapath/linux && make modules_install > make[1]: Entering directory '/home/ych/openvswitch-2.6.1/datapath/linux' > make -C /lib/modules/4.4.0-75-generic/build > M=/home/ych/openvswitch-2.6.1/datapath/linux modules_install > make[2]: Entering directory '/usr/src/linux-headers-4.4.0-75-generic' > INSTALL /home/ych/openvswitch-2.6.1/datapath/linux/openvswitch.ko > At main.c:222: > - SSL error:02001002:system library:fopen:No such file or directory: > bss_file.c:175 > - SSL error:2006D080:BIO routines:BIO_new_file:no such file: bss_file.c:178 > sign-file: certs/signing_key.pem: No such file or directory > INSTALL /home/ych/openvswitch-2.6.1/datapath/linux/vport-geneve.ko > At main.c:222: > - SSL error:02001002:system library:fopen:No such file or directory: > bss_file.c:175 > - SSL error:2006D080:BIO routines:BIO_new_file:no such file: bss_file.c:178 > sign-file: certs/signing_key.pem: No such file or directory > INSTALL /home/ych/openvswitch-2.6.1/datapath/linux/vport-gre.ko > At main.c:222: > - SSL error:02001002:system library:fopen:No such file or directory: > bss_file.c:175 > - SSL error:2006D080:BIO routines:BIO_new_file:no such file: bss_file.c:178 > sign-file: certs/signing_key.pem: No such file or directory > INSTALL /home/ych/openvswitch-2.6.1/datapath/linux/vport-lisp.ko > At main.c:222: > - SSL error:02001002:system library:fopen:No such file or directory: > bss_file.c:175 > - SSL error:2006D080:BIO routines:BIO_new_file:no such file: bss_file.c:178 > sign-file: certs/signing_key.pem: No such file or directory > INSTALL /home/ych/openvswitch-2.6.1/datapath/linux/vport-stt.ko > At main.c:222: > - SSL error:02001002:system library:fopen:No such file or directory: > bss_file.c:175 > - SSL error:2006D080:BIO routines:BIO_new_file:no such file: bss_file.c:178 > sign-file: certs/signing_key.pem: No such file or directory > INSTALL /home/ych/openvswitch-2.6.1/datapath/linux/vport-vxlan.ko > At main.c:222: > - SSL error:02001002:system library:fopen:No such file or directory: > bss_file.c:175 > - SSL error:2006D080:BIO routines:BIO_new_file:no such file: bss_file.c:178 > sign-file: certs/signing_key.pem: No such file or directory > DEPMOD 4.4.0-75-generic > make[2]: Leaving directory '/usr/src/linux-headers-4.4.0-75-generic' > depmod `sed -n 's/#define UTS_RELEASE "\([^"]*\)"/\1/p' > /lib/modules/4.4.0-75-generic/build/include/generated/utsrelease.h` > make[1]: Leaving directory '/home/ych/openvswitch-2.6.1/datapath/linux' > > > > Best wishes! > > > y...@panath.cn > It seems your kernel is configured with CONFIG_MODULE_SIG=y, so "make modules_install" is attempting to add a signature to each kernel module, but this is failing because the signing key certificate is not present. The signing key certificate is most often created as part of the base kernel build, and not included in distribution packages (for obvious reasons!), so I suspect this is a common situation. Based on looking at the kernel makefiles, this won't be treated as a fatal error and in fact from your "make modules_install" output it looks like it completed successfully. I think these errors can safely be ignored. Regards, Lance Richardson ___ discuss mailing list disc...@openvswitch.org https://mail.openvswitch.org/mailman/listinfo/ovs-discuss
[ovs-discuss] SSL error
Hi everyone, After install openvswitch-2.6.1, prompt SSL error, Does anyone know what reason is this? root@ubuntu:/home/ych/openvswitch-2.6.1#./boot.sh root@ubuntu:/home/ych/openvswitch-2.6.1#./configure --with-linux=/lib/modules/$(uname -r)/build root@ubuntu:/home/ych/openvswitch-2.6.1#make root@ubuntu:/home/ych/openvswitch-2.6.1#make install root@ubuntu:/home/ych/openvswitch-2.6.1#make modules_install = root@ubuntu:/home/ych/openvswitch-2.6.1# sudo make modules_install cd datapath/linux && make modules_install make[1]: Entering directory '/home/ych/openvswitch-2.6.1/datapath/linux' make -C /lib/modules/4.4.0-75-generic/build M=/home/ych/openvswitch-2.6.1/datapath/linux modules_install make[2]: Entering directory '/usr/src/linux-headers-4.4.0-75-generic' INSTALL /home/ych/openvswitch-2.6.1/datapath/linux/openvswitch.ko At main.c:222: - SSL error:02001002:system library:fopen:No such file or directory: bss_file.c:175 - SSL error:2006D080:BIO routines:BIO_new_file:no such file: bss_file.c:178 sign-file: certs/signing_key.pem: No such file or directory INSTALL /home/ych/openvswitch-2.6.1/datapath/linux/vport-geneve.ko At main.c:222: - SSL error:02001002:system library:fopen:No such file or directory: bss_file.c:175 - SSL error:2006D080:BIO routines:BIO_new_file:no such file: bss_file.c:178 sign-file: certs/signing_key.pem: No such file or directory INSTALL /home/ych/openvswitch-2.6.1/datapath/linux/vport-gre.ko At main.c:222: - SSL error:02001002:system library:fopen:No such file or directory: bss_file.c:175 - SSL error:2006D080:BIO routines:BIO_new_file:no such file: bss_file.c:178 sign-file: certs/signing_key.pem: No such file or directory INSTALL /home/ych/openvswitch-2.6.1/datapath/linux/vport-lisp.ko At main.c:222: - SSL error:02001002:system library:fopen:No such file or directory: bss_file.c:175 - SSL error:2006D080:BIO routines:BIO_new_file:no such file: bss_file.c:178 sign-file: certs/signing_key.pem: No such file or directory INSTALL /home/ych/openvswitch-2.6.1/datapath/linux/vport-stt.ko At main.c:222: - SSL error:02001002:system library:fopen:No such file or directory: bss_file.c:175 - SSL error:2006D080:BIO routines:BIO_new_file:no such file: bss_file.c:178 sign-file: certs/signing_key.pem: No such file or directory INSTALL /home/ych/openvswitch-2.6.1/datapath/linux/vport-vxlan.ko At main.c:222: - SSL error:02001002:system library:fopen:No such file or directory: bss_file.c:175 - SSL error:2006D080:BIO routines:BIO_new_file:no such file: bss_file.c:178 sign-file: certs/signing_key.pem: No such file or directory DEPMOD 4.4.0-75-generic make[2]: Leaving directory '/usr/src/linux-headers-4.4.0-75-generic' depmod `sed -n 's/#define UTS_RELEASE "\([^"]*\)"/\1/p' /lib/modules/4.4.0-75-generic/build/include/generated/utsrelease.h` make[1]: Leaving directory '/home/ych/openvswitch-2.6.1/datapath/linux' Best wishes! y...@panath.cn ___ discuss mailing list disc...@openvswitch.org https://mail.openvswitch.org/mailman/listinfo/ovs-discuss
[ovs-discuss] a struct to keep flow scores
Hello, I need to keep some score information per flow - which exist in the open-flow tables at user space , not necessarily in the data-path cache. These scores are learned during flow dumping phase - but should be saved also when flow is evicted from data-path. The udpif_key struct is not suitable for this since it exist only when flow exist in the data-path. What is the suitable structure to keep this info ? Best Regards avi ___ discuss mailing list disc...@openvswitch.org https://mail.openvswitch.org/mailman/listinfo/ovs-discuss