-
Notifications
You must be signed in to change notification settings - Fork 373
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Figure out a stable path for SSL installation in install-ovs.ps1 #5479
Labels
area/OS/windows
Issues or PRs related to the Windows operating system.
kind/bug
Categorizes issue or PR as related to a bug.
reported-by/end-user
Issues reported by end users.
Comments
XinShuYang
added
the
area/OS/windows
Issues or PRs related to the Windows operating system.
label
Sep 13, 2023
XinShuYang
added a commit
to XinShuYang/antrea
that referenced
this issue
Sep 20, 2023
* Fix the bug to prevent downloading the SSL library if files exist in the host path. * Add a parameter to support installing local SSL library. * Update the SSL download URL to the GitHub link. Fixes antrea-io#5479 Signed-off-by: Shuyang Xin <gavinx@vmware.com>
tnqn
pushed a commit
that referenced
this issue
Sep 20, 2023
* Fix the bug to prevent downloading the SSL library if files exist in the host path. * Add a parameter to support installing local SSL library. * Update the SSL download URL to the GitHub link. Fixes #5479 Signed-off-by: Shuyang Xin <gavinx@vmware.com>
XinShuYang
added a commit
to XinShuYang/antrea
that referenced
this issue
Oct 10, 2023
* Fix the bug to prevent downloading the SSL library if files exist in the host path. * Add a parameter to support installing local SSL library. * Update the SSL download URL to the GitHub link. Fixes antrea-io#5479 Signed-off-by: Shuyang Xin <gavinx@vmware.com>
XinShuYang
added a commit
to XinShuYang/antrea
that referenced
this issue
Oct 10, 2023
* Fix the bug to prevent downloading the SSL library if files exist in the host path. * Add a parameter to support installing local SSL library. * Update the SSL download URL to the GitHub link. Fixes antrea-io#5479 Signed-off-by: Shuyang Xin <gavinx@vmware.com>
XinShuYang
added a commit
to XinShuYang/antrea
that referenced
this issue
Oct 10, 2023
* Fix the bug to prevent downloading the SSL library if files exist in the host path. * Add a parameter to support installing local SSL library. * Update the SSL download URL to the GitHub link. Fixes antrea-io#5479 Signed-off-by: Shuyang Xin <gavinx@vmware.com>
tnqn
pushed a commit
that referenced
this issue
Oct 16, 2023
* Fix the bug to prevent downloading the SSL library if files exist in the host path. * Add a parameter to support installing local SSL library. * Update the SSL download URL to the GitHub link. Fixes #5479 Signed-off-by: Shuyang Xin <gavinx@vmware.com>
tnqn
pushed a commit
that referenced
this issue
Oct 16, 2023
* Fix the bug to prevent downloading the SSL library if files exist in the host path. * Add a parameter to support installing local SSL library. * Update the SSL download URL to the GitHub link. Fixes #5479 Signed-off-by: Shuyang Xin <gavinx@vmware.com>
tnqn
pushed a commit
that referenced
this issue
Oct 16, 2023
* Fix the bug to prevent downloading the SSL library if files exist in the host path. * Add a parameter to support installing local SSL library. * Update the SSL download URL to the GitHub link. Fixes #5479 Signed-off-by: Shuyang Xin <gavinx@vmware.com>
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Labels
area/OS/windows
Issues or PRs related to the Windows operating system.
kind/bug
Categorizes issue or PR as related to a bug.
reported-by/end-user
Issues reported by end users.
Describe the bug
Hi Antrea !
So, our SSL story https://github.com/antrea-io/antrea/blob/main/hack/windows/Install-OVS.ps1#L217 Appears to give some folks problems, but not other folks... I suppose its based on where they're pulling things down from and wether they trust sites like
fulgan.com
.The hardcoded fulgan.com URL is likely the root cause of all this - we need to find a way to more gracefully and intentionally configure SSL and heavily document it so there is no ambiguity or magic behavior in the future.
This has hit us in the past (kubernetes-sigs/sig-windows-dev-tools#198) and there was some work done to make it better, but I don't fully understand what the end result should be... the TLDR is that,
requirements
To Reproduce
Not quite sure how to reproduce this, but we've seen it from time to time in the past
Expected
Actual behavior
Its not clear what to do in cases where
happens. We need a workaround or fallback url for people who cannot access, or do not trust, this HTTPS endpoint, that can be plumbed in or just automatically works in the install-ovs.ps1 scripts
The text was updated successfully, but these errors were encountered: