TLS Options Documentation Not Working with v20.03.1

Issues Dgraph
, , ,
1

Moved from GitHub dgraph/5350

Posted by darkn3rd:

Documentation

The documentation for TLS Options does not work in curent version v20.03.1

Specifically this no longer works:

# Now, connect to server using TLS
$ dgraph live --tls_dir tls -s 21million.schema -f 21million.rdf.gz

Workaround

The correct command depends on how the certificate was setup, and also the host that the service is running on. I was able to get it working with this:

dgraph live \
  --tls_cacert ./tls/ca.crt \
  --tls_cert ./tls/client.user.crt \
  --tls_key ./tls/client.user.key \
  --tls_server_name "$(hostname -f)" \
  -s 21million.schema \
  -f 21million.rdf.gz

I setup my environment with this:

curl -sSf https://get.dgraph.io | VERSION="v20.03.1" bash
dgraph cert
dgraph cert -n $(hostname -f)
dgraph cert -c user
dgraph zero --my="$(hostname -f):5080" --idx 1
dgraph alpha --my=$(hostname -f):7080 \
 --zero $(hostname -f):5080 \
  --lru_mb 2048 \
  --tls_dir=./tls \
  --tls_client_auth=REQUIREANDVERIFY
2

darkn3rd commented :

I was hoping an engineer could look at this, verify if this was a feature at all. But in mean time editing documentation to show another path.

3

gumupaier commented :

I had the same problem,

Error: unknown flag: --tls_dir