Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Handshake failed with fatal error SSL_ERROR_SSL: error:1000007d:SSL routines:OPENSSL_internal:CERTIFICATE_VERIFY_FAILED #376

Open
samjax opened this issue Oct 11, 2024 · 7 comments
Assignees

Comments

@samjax
Copy link

samjax commented Oct 11, 2024

I am trying to use VectorDBBench tool for benchmarking my cluster running in AWS. This cluster is SSL enabled. On the new VectorDBbench interface there is no option for supplying client cert, key and cacert. It used to be there on the previous version of the tool. Has it been removed? Are there any other options?

@XuanYang-cn
Copy link
Collaborator

What DB are you testing on? Are you using db client already in the repo?

If it's self deployed Milvus, try to use this url: "https://host:port"

@samjax
Copy link
Author

samjax commented Oct 11, 2024

Sorry, it is for benchmarking a Milvus cluster running in AWS. I have a gslb in between via port 443.

@samjax
Copy link
Author

samjax commented Oct 11, 2024

Issue is, on the benchmarking tool UI I don't see an option to pass the certificates. Is there a way to pass the certs for authentication.

@XuanYang-cn
Copy link
Collaborator

@samjax I see.

Have you try to connect with Milvus use plain PyMilvus client? If so, what's the connections params of yours? I'm not sure if use a secured channel for this is enough.
Could you please show me the result of the following code?? Does it raise exceptions too?

from pymilvus import connections
connections.connect(uri="https://the-aws-alb-address:443") # use https here

@samjax
Copy link
Author

samjax commented Oct 11, 2024

I am getting this error: [__internal_register] retry:4, cost: 0.27s, reason: <_InactiveRpcError: StatusCode.INTERNAL, Received http2 header with status: 400>

@XuanYang-cn
Copy link
Collaborator

Looks like pymilvus is unable to connect with Milvus through gslb. I'll seek some help from our devops expertise.

@XuanYang-cn
Copy link
Collaborator

@samjax In the mean time, could you try to pass the certificats like this and connect with Milvus successfully? https://milvus.io/docs/tls.md#Two-way-TLS-connection
image

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants