dvn  
                
               
              
                  
                    9 December 2021 11:42
                   
                   
              25 
               
             
            
              Okay. I think I’ve fixed the identified problems with rhyzome-api now, and I’ve taken the nice little PKI setup script you made and simplified it a bit while making it more verbose. We don’t need to generate Intermediate certs.
I’m working on a script to automate an asciicinema screencast now. This will also prove as a test for the setup instructions.
             
            
               
               
               
            
           
          
            
              
                dvn  
                
               
              
                  
                    9 December 2021 11:42
                   
                   
              26 
               
             
            
              Will follow up here once I’m ready for you to try again.
Talk to you Monday at the earliest, I guess. Have a good weekend.
             
            
               
               
               
            
           
          
            
              
                how  
                
               
              
                  
                    9 December 2021 11:42
                   
                   
              27 
               
             
            
              Good morning, I’m updating the repositories.
 Rhyzome-API 
Still JWT on EG and failing to read the private key with updated conf:
( how )% ♥ ./rhyzome-grpc
INFO[2021-12-06T10:02:48+01:00]/home/how/src/dream/rhyzome-api/config/config.go Load() successfully read config from rhyzome-api.json
DEBU[2021-12-06T10:02:48+01:00]/home/how/src/dream/rhyzome-api/config/config.go Load() config as loaded: {HTTPBind::8080 GRPCBind::9090 DB:dbname=rhyzome host=/var/run/postgresql sslmode=disable PKI:{Cert:/home/how/.step/certificates/example.crt Key:/home/how/.step/certificates/example.key CA:/home/how/.step/certificates/root_ca.crt} Keycloak:{JWKS:https://auth.entanglement.garden/auth/realms/entanglement.garden/protocol/openid-connect/certs ResourceScope:} DisableAuthz:true}
FATA[2021-12-06T10:02:48+01:00]/home/how/src/dream/rhyzome-api/grpcserver/server.go ReloadCertificates() error loading grpc TLS key pair:tls: failed to parse private key
 
 Rhyzome-LibVirt 
libvirt-headers does not seem to exist in Debian. I would assume libvirt-dev. 
It seems to require a packaged rhyzome: 
 
( how )% ♥ go build -o rhyzome-libvirt cmd/rhyzome/main.go
package cmd/rhyzome/main.go is not in GOROOT (/usr/lib/go-1.15/src/cmd/rhyzome/main.go)
 
 
I’m stuck to the same place as last week, except I’m supposed to meet with Mirko today, tomorrow, or Wednesday.
 Rhyzome-OpenWrt 
I hit the same private key problem. Here is the private key it fails to parse:
DEBU[2021-12-06T10:33:18+01:00]/home/how/src/dream/rhyzome-openwrt/grpcclient/grpcclient.go Connect() connecting to grpc server in 2s
DEBU[2021-12-06T10:33:20+01:00]/home/how/src/dream/rhyzome-openwrt/grpcclient/grpcclient.go connect() loading x509 pair from /home/how/.step/certificates/example.crt and /home/how/.step/certificates/example.key
ERRO[2021-12-06T10:33:20+01:00]/home/how/src/dream/rhyzome-openwrt/grpcclient/grpcclient.go connect() error loading x509 pair: tls: failed to parse private key
ERRO[2021-12-06T10:33:20+01:00]/home/how/src/dream/rhyzome-openwrt/grpcclient/grpcclient.go Connect() error connecting to grpc server: tls: failed to parse private key
( how )% cat example.key
-----BEGIN EC PRIVATE KEY-----
Proc-Type: 4,ENCRYPTED
DEK-Info: AES-256-CBC,2aea2a9b80cff9dfe77e09d329cfcbbb
r9nfwB+3ttLzQUOnahzU+UQ5FCPQtgnPUvz92xCpfgtccKHab8b9iJ1yzuyW/i90
AY9shWC3nZ/RXk3rabwWMv5LnYj7n3ZzMcbiC/x0rpM83hxFuLxmnB0teYZVVnD2
zKtNDelrmSF5H7Ap+lhR4zLraU2Y71gF4SBcAn/ujRo=
-----END EC PRIVATE KEY-----
 
             
            
               
               
               
            
           
          
            
              
                how  
                
               
              
                  
                    9 December 2021 11:42
                   
                   
              28 
               
             
            
              @dvn , I’m waiting on the mumble, I think it’s better if we can talk while working so we can fix all this faster.
             
            
               
               
              1 Like 
            
           
          
            
              
                dvn  
                
               
              
                  
                    9 December 2021 11:42
                   
                   
              29 
               
             
            
              Was not online this morning. Would love to get on a call with you in 15 mins.
             
            
               
               
              1 Like 
            
           
          
            
              
                dvn  
                
               
              
                  
                    9 December 2021 11:42
                   
                   
              30 
               
             
            
              The screencast is added to the top post of this thread and it’s generated using this script:
             
            
               
               
              1 Like 
            
           
          
            
              
                dvn  
                
               
              
                  
                    9 December 2021 11:42
                   
                   
              31 
               
             
            
              I believe we are ready to publish D2.3 now.
@how  what do you think?
             
            
               
               
              2 Likes 
            
           
          
            
            
              Congrats, I am quite amzed that we reach this point and it gives me hope for the future.
             
            
               
               
              1 Like