Can't make dmg/pkg, certs not located?

[Hayden]

Hello, thanks for this great project - I'm hoping to try it out on a small deployment of about 20 machines, but I'm having problems even building the client.

I've got my app engine instance up and running and configured properly. I tried out munki and decided I'd like more functionality so I'm attempting simian (kind of a novice). I have munki installed on my test machine so I attempted to just 'make simian-pkg' instead, here is the error:

/usr/bin/python2.6 -c 'import virtualenv' || \

sudo easy_install-2.6 -U virtualenv

[ -d VE ] || \

/usr/bin/python2.6 /usr/local/bin/virtualenv --no-site-packages VE

rm -rf dist/simian-2.1.tar.gz dist/simian-2.1.tar

[ -f test ] || \

env SIMIAN_CONFIG_PATH="/Users/foo/Public/simian/etc/simian/" \

VE/bin/python setup.py google_test && touch test && \

echo ALL TESTS COMPLETED SUCCESSFULLY

ALL TESTS COMPLETED SUCCESSFULLY

VE/bin/python \

src/simian/util/validate_settings.py etc/simian/ \

src/ ./pyasn1*.egg ./tlslite*.egg

INFO:root:Loading settings

./tlslite-0.3.8-py2.6.egg/tlslite/utils/cryptomath.py:9: DeprecationWarning: the sha module is deprecated; use the hashlib module instead

INFO:root:Looking for required setting server_public_cert_pem

DEBUG:root:_Get(server_public_cert_pem)

DEBUG:root:_GetExternalPem(server_public_cert_pem)

DEBUG:root:_GetExternalConfiguration(server_public_cert.pem)

ERROR:root:Configuration not found: server_public_cert.pem

ERROR:root:missing required setting server_public_cert_pem

make: *** [settings_check] Error 1

I have the certs sitting in etc/simian/ssl, and the subsequent folders certs and private_keys. Not sure what this requires, I've done everything in the instructions (unless there are things left out that most sys admins implicitly understand - which I don't!). Any help appreciated, cheers

[Allister Banks]

It's PWD/etc/simian/ssl that the certs and subfolders are in on your build machine, not root etc, right? This can sometimes happen if your cert is in an invalid format, how are you generating your certs?

Allister 

--
You received this message because you are subscribed to the Google Groups "Simian Discuss" group.
To unsubscribe from this group and stop receiving emails from it, send an email to simian-discus...@googlegroups.com.
For more options, visit https://groups.google.com/groups/opt_out.
 
 

[Hayden]

Correct, I just have the files in my ~/Public/ dir, trying to build out of there. My certs are not in .pem but .crt, .key, I hope that's not the problem, I'll try to use .pem.

[John Randolph]

On Thu, Apr 11, 2013 at 2:52 PM, Hayden <crackh...@gmail.com> wrote:
> Correct, I just have the files in my ~/Public/ dir, trying to build out of
> there. My certs are not in .pem but .crt, .key, I hope that's not the
> problem, I'll try to use .pem.
>

Hi Hayden

the format needs to be pem

example where it is asking for that format:

ERROR:root:Configuration not found: server_public_cert.pem

don't just rename them, make sure you regenerate them as pem format
(not DER encoding)

cheers
John

--
John Randolph -- Google New York

[Hayden]

That's interesting, mostly because I uploaded the .crt and .key files to the app engine instance and it happily accepted those. I'll try again and regenerate them, thanks!

[Hayden]

Oh wow, so I ended up just renaming the files to .pem, but I didn't understand that they had to be LITERALLY named ca_public_cert, and so on. Ok got it built with the renamed files, in the future I'll just regenerate some.