256 lines
28 KiB
Markdown
256 lines
28 KiB
Markdown
# Client-Token Test (`my_`)
|
|
|
|
> This document belongs to the test-case [test_config_token.py](/src/test/test_config_token.py)
|
|
|
|
Our *Client-Token* itself is consistent and all validations are successful. But the `nvidia-gridd` service fails to
|
|
verify.
|
|
This probably is, because we are using certificates which are not singed by nvidia. This maybe is done by the initial
|
|
instance-token exchange.
|
|
|
|
Maybe the only way to get successful, is to fake the whole instance-token exchange.
|
|
|
|
[TOC]
|
|
|
|
## Response Payload
|
|
|
|
```json
|
|
{
|
|
"certificateConfiguration": {
|
|
"caChain": [
|
|
"-----BEGIN CERTIFICATE-----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\r\n56OFWPHcA7gxkpU8wftrVMLFeDvLIGc=\r\n-----END CERTIFICATE-----"
|
|
],
|
|
"publicCert": "-----BEGIN CERTIFICATE-----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\r\n-----END CERTIFICATE-----",
|
|
"publicKey": {
|
|
"exp": 65537,
|
|
"mod": [
|
|
"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"
|
|
]
|
|
}
|
|
},
|
|
"configToken": "eyJhbGciOiJSUzI1NiIsInR5cCI6IkpXVCJ9.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.BpMtY8Z1_hbzW-R4b9Ntet5HjvlwTfmMyh7bZVLFG8wIMfMHWJZCJdZC99TRznkkoOQg6qkhpyWMYAMGV5AOTRvzqu9LftnLJIq8Iih5YxUWpyPHNbKu0V54C41H7yG5uR96ypn3dIfjEqzJb9LK-oIL_TYVwKEf2rKcLUs-FtoaEWMIGFqm2RBR4yPuRZBUPiHjhUZkzig2c-mS-kB_sNvzBV66cvUxKKNwQw3JgewT3OlvA7ixcLE0X3e_M4u6K67W9uX5nfa5dlY2Fm6GoRnMqW7pW8zWIHtFFt3brOQOlgTKjlippx_jqD9P3qBXBp704Pk-_V7XlfAOTGLuyA"
|
|
}
|
|
```
|
|
|
|
## JWT `$.configToken`
|
|
|
|
```
|
|
eyJhbGciOiJSUzI1NiIsInR5cCI6IkpXVCJ9.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.OUHugJf1npBrVL7kZAUb0HsoMJq69ejau3SjdLz0yURkYxm87oP3BVX1jXstPdM40EYJ6tKy_SUXeGHFaOe06pnCvSKbx0c2u9egAqarW_jHMkrOT5PHHKBHTdm2KbRyX5nIgHaYCvAQIyZrPEPA4S5abYpJffJzZ7XLf5Rf6nrUco5W_T-Zt0VZ2AOvPutmn1CV5VXCbBfh1ekaVjuxTr3rTl8xsuIXBfXDLm-W2L-TJCT-uB450m4MLROmc7on3If3sG64PG8Bdd5o8TqEmjigoOND2K5_3H9G6aAHjBWiI8aGgzNo9oO-s_DBYcOIODS_jOJr_2n6SM_UKIM-8w
|
|
```
|
|
|
|
### JWT decoded
|
|
|
|
```
|
|
{
|
|
"iss": "NLS Service Instance",
|
|
"aud": "NLS Licensed Client",
|
|
"iat": 1743022769,
|
|
"nbf": 1743022769,
|
|
"exp": 1743023669,
|
|
"protocol_version": "2.0",
|
|
"d_name": "DLS",
|
|
"service_instance_ref": "d8c07e4a-f6a4-49d0-b2dc-3faf0e1bf2bd",
|
|
"service_instance_public_key_configuration": {
|
|
"service_instance_public_key_me": {
|
|
"mod": "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",
|
|
"exp": 65537
|
|
},
|
|
"service_instance_public_key_pem": "-----BEGIN PUBLIC KEY-----\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4hKQSjyWdWAvkStVPRhK\n5ObBDX6ghF4ULkmDB5iKdexAWPPKaHCGHER+1GGABsAwU9gn1nxhI1npnoM6a9qp\ncXwMRTf5R14zSGisyzug6SJSUykxnLG1K6uYTTQo95sXKee7bAzoHERhWK9Uxqki\nvLwW2rGiW8hRG4UHQ/Ea3OVrjPbRHfmsaJm4tbf2oBkZ1S3xhzQIIkrV8f3RUe1S\nxxQ/iftf5UaYOZzru6my4Sb/vIjEU66SiDnkJwbqVKdkI86q21YLXq7DMi+vAVIE\n5rc/SWYz/iRZ/McsRDrofVxQIoHq71613XEmTyQkRm0T/I44Yhynhe2qQLgf0hzu\nBQIDAQAB\n-----END PUBLIC KEY-----",
|
|
"key_retention_mode": "LATEST_ONLY"
|
|
}
|
|
}
|
|
```
|
|
|
|
### JWT Signature
|
|
|
|
Signature can be verified with KeyPair from Database `public_private_key_pair`.
|
|
```
|
|
-----BEGIN RSA PRIVATE KEY-----
|
|
MIIEpAIBAAKCAQEAnApHWXQGS4wRp8JCnzoT/ufN96gsuAG0XCJMwhoFPRoVZNUq
|
|
x9AEjp7LWqFqGzCdhG5GkwT/CMeQgeAKQAiERyascHs3pwSquOct3QCd41TrbSkR
|
|
eRjm8SyfZ8mvS+4weXdTnMJhRAX6b8S1jR7os9gf2DfKPWOxSi8ziBHevQp2k5VC
|
|
p7reGwfRK4uYgq6mRSFbkrTDYg9nl5fMR0hHJfpDL177eiO+EnU6dRbKUo1pNqAa
|
|
9DutieVvEAeEM/8ZXz9xmcVhkwKDo47lATCdNidU7ivP2u+3EGegurCdeI3+lTTq
|
|
3PYGEIxDkGrLAmIyVnduWCnNdZy4N4Z7kUVuXwIDAQABAoIBAC+21Op9mA8x3ZQ2
|
|
yrh1wfeIWmsIeeQqYURrGJ2h50gv2arjpBlFep9B31zvTsrRqtj7/4ilVncQzxdn
|
|
srqx4AEBymj6xKHFw46W4mdZ8O264eKXVEh7XOMSigvqmDfXterumhqtNaDfUx0q
|
|
QXnNocqco+Ax7x2mhmfw1wkcrceQGNoaogflWyYIPmWmGop0J+1d98rMRaT6ss4R
|
|
StKXsaAIiEt1eaxpi0a/dis2kI9qNsz66NL/R/QrdgEU6klV1DiJDvPk0M1YAkTa
|
|
mRZO5fJbNo1+jngtvUOK2YYWOv+UHoYl2gmMLa5JwFcHd6KS74rz2RQBfDpF9vtI
|
|
wdRqgQECgYEAt+PMB00e16aqXmwY3758OyBWm3Mxh2PcZjclgLW9yG283jRi8gXR
|
|
pdSaQwLKVt0m+37tPXwf7gK0Hbhk9U73NIma917JHFheQKxhgNlQWddnyxkZ0Mxt
|
|
9iIccYFOLfVePckUzQfIr3Zc0nNDRbr5VYl5y6WwzC9RcB8qblZjyU8CgYEA2Tq6
|
|
Qisy07jlG3/tWqMaKvIHFQmxa831YlnAXHu9vknxdXwwMX2ue8bDMcQYy0U7BKu4
|
|
Tz1YNdOXYiWFmAMtVCV99M1ICiHmYxhUJlDbTa0D5UnQil2Nb8Vp+5p5NhtDzsTq
|
|
diMs1lC2xDBenwGTwfNFU0sEmegk1w0E6mrbpfECgYAtcbpGQ6TPnnyUARrUkHqb
|
|
Eg7VM86VqvQYvqAiAsf39Easkz2wmgeJd9T3ooTmmpi7pk5y1238n+ZrQdqRVQZ6
|
|
kVcesun4e04vpWojMZFN4pHf+0AJ/btfDGcDFfWAHhdAJaViVf4efp3J1HpXjTF5
|
|
FhRnY3chvr/deZY+1lKquQKBgQC0Xh7pchTx10PkYYQjDepcXjmjLjky2gA1eXBP
|
|
Wi9iIONsOYGKlmCaRZ8tYzVzEji+2BZhNP5ZMycvRxh1761jgP3klc6LGzrAbSLx
|
|
7ZEqHc5uQ6v0N1mIxNILJ2gdlOXoeXh0PyCrkrkujTsDq7uT/vpA/rkDUc3FAfpi
|
|
6fcXAQKBgQCWx2z84avYKblDtD3WcZUizcRiC98iBZ7Ws+uoFgNAn8PtlwIK3Tbn
|
|
izokE+pyYQ5QScZd4EVlvRowHl9a6l40mKxJ8Navrb8+BRHeqSRpX/g2JBgjLxLn
|
|
z7gQk1e4yws6qBpi0ratWbdf4kg14w7xONGNKp1kQDf+EoEvjrXaLA==
|
|
-----END RSA PRIVATE KEY-----
|
|
|
|
-----BEGIN PUBLIC KEY-----
|
|
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnApHWXQGS4wRp8JCnzoT
|
|
/ufN96gsuAG0XCJMwhoFPRoVZNUqx9AEjp7LWqFqGzCdhG5GkwT/CMeQgeAKQAiE
|
|
RyascHs3pwSquOct3QCd41TrbSkReRjm8SyfZ8mvS+4weXdTnMJhRAX6b8S1jR7o
|
|
s9gf2DfKPWOxSi8ziBHevQp2k5VCp7reGwfRK4uYgq6mRSFbkrTDYg9nl5fMR0hH
|
|
JfpDL177eiO+EnU6dRbKUo1pNqAa9DutieVvEAeEM/8ZXz9xmcVhkwKDo47lATCd
|
|
NidU7ivP2u+3EGegurCdeI3+lTTq3PYGEIxDkGrLAmIyVnduWCnNdZy4N4Z7kUVu
|
|
XwIDAQAB
|
|
-----END PUBLIC KEY-----
|
|
```
|
|
|
|
### CA-Chain `$.certificateConfiguration.caChain[0]`
|
|
|
|
```
|
|
-----BEGIN CERTIFICATE-----
|
|
MIIF3TCCA8WgAwIBAgIUCpVszfecRrnPa3EGwPKuyWESBmMwDQYJKoZIhvcNAQELBQAwcjELMAkG
|
|
A1UEBhMCVVMxEzARBgNVBAgTCkNhbGlmb3JuaWExDzANBgNVBAoTBk52aWRpYTEnMCUGA1UECxMe
|
|
TnZpZGlhIExpY2Vuc2luZyBTZXJ2aWNlIChOTFMpMRQwEgYDVQQDEwtOTFMgUm9vdCBDQTAeFw0y
|
|
NDA5MjYwNzM4MTlaFw0zNDA5MjQwNzM4NDlaMHoxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpDYWxp
|
|
Zm9ybmlhMQ8wDQYDVQQKEwZOdmlkaWExJzAlBgNVBAsTHk52aWRpYSBMaWNlbnNpbmcgU2Vydmlj
|
|
ZSAoTkxTKTEcMBoGA1UEAxMTTkxTIEludGVybWVkaWF0ZSBDQTCCAiIwDQYJKoZIhvcNAQEBBQAD
|
|
ggIPADCCAgoCggIBAOIb5ZcYWR78WkJipEW4cOB2d3WkXhjzA9Omj0SBnA6fJad+zObguInmkgyB
|
|
UC/0xMnHeEH1WQpZ0yZE1rdH0ziwPy07hmCgjMSC8iXSfV4QXoHzsQy80HSbD3dr0A5Fk9UrWdJu
|
|
IlLnwqTfUjxMSqiVYbGI2JLVLDIPjnrCKgZ//vVTFWiMDQaGInDz5Qo3azHIt1Sw3u47/b88TzmK
|
|
i3TMbjtAR3djlhQfJBY6nUdP8wWy2Fntx9fO7U723sp6cnGtHnbXGpon/QqxlPjT4RXXm1QmFQ/d
|
|
yUmvmjoiJsCQ3v2KFJNei2bkUS29ZKPr4TGokojOilESQAQTLo+5s0cN7ZtPWvwZ4uets84GCRP5
|
|
dC+aKoNQ7cg06A1tA3SxEL9r6D2LaTiheuWKFNiIJZzfmmbTPExsKt4Nzmv72wfG2i2+sY6l4f5x
|
|
EFiKybn2EY1Hjpt0J3vL/goOOt/ejRtS5qKco3pu6zZBBWqB1qesA813AGgqbscht4y4m414rPmQ
|
|
aHA2PTe0JRDcradK75chFUOvLeIYD1Hy0XTxNxlhRA/5mFd2GkWZmtsW3D1iAV73VHAEvWDS0hXB
|
|
g60B0y4d3fyYxI+pOTaZzsh0PAC2jUqDOhQ7dKELeYUKWsEDDMq9mg2bxqSNoQnQbITIsbu7IELu
|
|
vmxIWT1omRptd5LrAgMBAAGjYzBhMA4GA1UdDwEB/wQEAwIBBjAPBgNVHRMBAf8EBTADAQH/MB0G
|
|
A1UdDgQWBBRKNST8UPeZYQgLZLEKMBGklaADHjAfBgNVHSMEGDAWgBRiEXE0RonjkPN+XBjnSQbo
|
|
A8X3ajANBgkqhkiG9w0BAQsFAAOCAgEAEq5FaQWhTWt1hNfoz/BeDQ68O9PEGGveCPouElE8s/uG
|
|
PHYSJpmg7dq5Qoxb5dpdq1mJX2rTgixJu/iC3uRUsirdH6wsVjjqz4YsoAz5VqjlkriFJpXlfOpp
|
|
w18ex5C5p4x3TrlPCowMgf9h6VBR1iCq3VikVVguqSPP/zf9G3Qhitvqs0+m7KJnbwFA/bDLMET8
|
|
TJS/r4XKQYisXfu95XrG2TTCaOwytqx+uepqwB74tFMznfdjzKyztqGwniKLrcZ3kOuM4cyo5ZT4
|
|
OORCV6FWmbRq2OtttI4o85zsVNkY1JF8hvyvjygRiX5dQROza5EStkXvGO6532atFU43KNJvLanZ
|
|
ZTaxIJvZGWeKvrH+HTCANp11cgq5qcRRltQHb7KWweYNM4nyCjyBQm5vTm7g1uVI7llVm2Txx5dT
|
|
5OtenaohmJIr6POeq8Y2Z+DJ8s3UpZoZCc3Vj5PQyNZiAx2ErN6XgrsmljG3w6+k2ooLpT9Sr1Ql
|
|
Kc8okN5SJGUOLuFI+h8jX1hHqpQejjNKy3UkTzjosYNq6Kk0h2Tl1i8iO+wY4Wb3GbL6GtP1rcjI
|
|
p/d9mxPNJONlp4a0koaMEpHTODT/xyVjU7FkUyKE9Uj1O/1lBEANYsFrQGfmuHAZTGf9J+cvkrz3
|
|
56OFWPHcA7gxkpU8wftrVMLFeDvLIGc=
|
|
-----END CERTIFICATE-----
|
|
```
|
|
|
|
**Details** todo
|
|
|
|
- Serial Number: `0A:95:6C:CD:F7:9C:46:B9:CF:6B:71:06:C0:F2:AE:C9:61:12:06:63` (`60422196956716054748324366494382031228994979427`)
|
|
- Subject DN: `CN=NLS Intermediate CA, OU=Nvidia Licensing Service (NLS), O=Nvidia, ST=California, C=US`
|
|
- Issuer DN: `CN=NLS Root CA, OU=Nvidia Licensing Service (NLS), O=Nvidia, ST=California, C=US`
|
|
- Critical Extensions
|
|
```
|
|
Certificate Signing
|
|
CRL Signing
|
|
Subject is a CA
|
|
Path Length Constraint: None
|
|
```
|
|
- Non Critical Extensions (**both `Key Identifier` have changed after resetting NLS-Instance**)
|
|
```
|
|
Key Identifier: 0x4A35 24FC 50F7 9961 080B 64B1 0A30 11A4 95A0 031E
|
|
Key Identifier: 0x6211 7134 4689 E390 F37E 5C18 E749 06E8 03C5 F76A
|
|
```
|
|
|
|
### Public-Cert `$.certificateConfiguration.publicCert`
|
|
|
|
This is used to verify JWT-Signature.
|
|
|
|
> [!alert]
|
|
> On official DLS we have no private/public key. This certificate is only
|
|
> present in database "configuration" => "DLS_SI_CERTIFICATE".
|
|
> There also is an encrypted private-key, which probably is the private-key
|
|
> belonging to this certificate.
|
|
|
|
```
|
|
-----BEGIN CERTIFICATE-----
|
|
MIIE2zCCAsOgAwIBAgIUPyoRsVIJLnex1WKbERqLAQcXHcQwDQYJKoZIhvcNAQELBQAwejELMAkG
|
|
A1UEBhMCVVMxEzARBgNVBAgTCkNhbGlmb3JuaWExDzANBgNVBAoTBk52aWRpYTEnMCUGA1UECxMe
|
|
TnZpZGlhIExpY2Vuc2luZyBTZXJ2aWNlIChOTFMpMRwwGgYDVQQDExNOTFMgSW50ZXJtZWRpYXRl
|
|
IENBMB4XDTI1MDMyNjIwMjcyMloXDTI4MDMyNTIwMjc1MlowLzEtMCsGA1UEAxMkZDhjMDdlNGEt
|
|
ZjZhNC00OWQwLWIyZGMtM2ZhZjBlMWJmMmJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
|
|
AQEAwAJLh9/L2l2Efl+TLWp2pCuwJZJBpcHcVbksrXRTfV9dEe+UY1atNbg0HE6yz03CWkeIkTeW
|
|
zYkg7oF7bdZ/usZpTIRnK0bN/FzXeXkENOGNsLgcjSGWu8IP4mJcp/k7Ucg/FgDMbxVYifBKnrOh
|
|
T7HZ21UQcXgik9iEnL0chAW/JmcEHMTofkj+BuKdyUqXHj4OKDLOhmPtKCKY0gv+0wL4t7alzsGS
|
|
lXsRC/59ddCLyomHlRU5BJb+Fm73ZFmhEYhR3eindFzqXJhDXQpg9d0Mt42YTFfnlKG41ECdxtmH
|
|
YOOw5sSweFsrx9Dzlfcx/SSg0q9OXP0wHv+kNd/CMQIDAQABo4GjMIGgMA4GA1UdDwEB/wQEAwID
|
|
qDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwHQYDVR0OBBYEFDtS2fehr07/mVr2ZCb5
|
|
+BRuaWjNMB8GA1UdIwQYMBaAFEo1JPxQ95lhCAtksQowEaSVoAMeMC8GA1UdEQQoMCaCJGQ4YzA3
|
|
ZTRhLWY2YTQtNDlkMC1iMmRjLTNmYWYwZTFiZjJiZDANBgkqhkiG9w0BAQsFAAOCAgEAbrgK1TBm
|
|
wUVkSGnGSy88RevUd3a52TxAYxGuVe/2qYuIkSoPfMJ1P5nbk6hnOjiBg5GGSrqv6Qwj+ZtPo6cm
|
|
yg0Z8RXb5cboU+3Xru6HEQCsidLuC1bwbcsnmvyt4pJxjGG1MQvN9jBWBGiKvqSnDuLMW34eD7mg
|
|
Lm1W0QCMzTvxIxH2X/xylT2q7gkFdDPxHnMotYeFpeYmPn6nqI36Ot7xBv512RUZz5hdG6r20LSP
|
|
dbHoBYZIbaS+wGTaAOFIpms1Xwe/S/ehQpMpArlzphqV+o9IOZn8BIRvpT3d4r8iV/a2TtbxPDVX
|
|
OR/aooC9BRI7Q52b2V3L0aKYeC2P8bqqwoivBrWPnr12h+CRx18NvF7sxJ8A8O6h7+Os2psA22CX
|
|
vDd0ngxnNy08CMgS1u98Nxg5nV2P596mLRY9X7dzgQikoabEfKtqdKOW4PJWI/wane44ju6vUZPK
|
|
3MyAgUWJr34aB8Q0paou0atP9OW+KOeFuwICL02RQ7ke5IpBQrWSF/OlMxhnepzhnp1favk5W3rl
|
|
cZNLQMFmeaxyKKrjowh3diBsfo2m6Qin/fkRA3w62Zfox37l5q4s+B/YPxMmrcJgoDFxxf2WYDc6
|
|
soqR7/ExG7kHasd+Th+oqaX8LGdGUfZMD/IY6wvOFJ1Smh7QgWTZbUyLRwTU6jZ40pM=
|
|
-----END CERTIFICATE-----
|
|
```
|
|
|
|
**Details** todo
|
|
|
|
- Serial Number: `3F:2A:11:B1:52:09:2E:77:B1:D5:62:9B:11:1A:8B:01:07:17:1D:C4 ` (`360604591108124329929053425883734788758453034436`)
|
|
- Subject DN: `CN=d8c07e4a-f6a4-49d0-b2dc-3faf0e1bf2bd`
|
|
- Issuer DN: `CN=NLS Intermediate CA, OU=Nvidia Licensing Service (NLS), O=Nvidia, ST=California, C=US`
|
|
- SASNS: `d8c07e4a-f6a4-49d0-b2dc-3faf0e1bf2bd`
|
|
- Critical Extensions
|
|
```
|
|
Digital Signature
|
|
Key Encipherment
|
|
Key Agreement
|
|
````
|
|
- Non Critical Extensions (**both `Key Identifier` have changed after resetting NLS-Instance**)
|
|
```
|
|
Key Identifier: 0x3B52 D9F7 A1AF 4EFF 995A F664 26F9 F814 6E69 68CD
|
|
DNS Name: d8c07e4a-f6a4-49d0-b2dc-3faf0e1bf2bd
|
|
Key Identifier: 0x4A35 24FC 50F7 9961 080B 64B1 0A30 11A4 95A0 031E
|
|
TLS Web Server Authentication (1.3.6.1.5.5.7.3.1)
|
|
TLS Web Client Authentication (1.3.6.1.5.5.7.3.2)
|
|
```
|
|
|
|
## Error Message from `nvidia-gridd`
|
|
|
|
**Result from current `config-token`**
|
|
|
|
```
|
|
Mär 21 12:22:10 debian-grid-test nvidia-gridd[586]: Failed to verify public certificate (error:0A000126:SSL routines::unexpected eof while reading)
|
|
Mär 21 12:22:10 debian-grid-test nvidia-gridd[586]: Failed to verify public certificate (error:00000000:lib(0)::reason(0))
|
|
Mär 21 12:22:10 debian-grid-test nvidia-gridd[586]: Failed to validate public certificates
|
|
Mär 21 12:22:10 debian-grid-test nvidia-gridd[586]: Server configuration validation failed. Invalid certificate received from server.
|
|
Mär 21 12:22:10 debian-grid-test nvidia-gridd[586]: Failed to setup cloud License Manager: 3
|
|
Mär 21 12:22:10 debian-grid-test nvidia-gridd[586]: Shutdown (586)
|
|
Mär 21 12:22:10 debian-grid-test systemd[1]: nvidia-gridd.service: Main process exited, code=exited, status=1/FAILURE
|
|
Mär 21 12:22:10 debian-grid-test systemd[1]: nvidia-gridd.service: Failed with result 'exit-code'.
|
|
```
|
|
|
|
What is interesting, that `caChain` and `publicCert` on original dls response, contains 76 chars per line,
|
|
where our (default pem) only contains 64 chars.
|
|
|
|
But even after splitting into 76 char-chunks (so both, our and nvidias, CA files and Cert files have an equal length)
|
|
|
|
```
|
|
{"certificateConfiguration": {"caChain": ["-----BEGIN CERTIFICATE-----\r\nMIIF3TCCA8WgAwIBAgIUNoGIMFv9PE3CjR+dRdc0q5CqdAYwDQYJKoZIhvcNAQELBQAwcjELMAkG\r\nA1UEBhMCVVMxEzARBgNVBAgMCkNhbGlmb3JuaWExDzANBgNVBAoMBk52aWRpYTEnMCUGA1UECwwe\r\nTnZpZGlhIExpY2Vuc2luZyBTZXJ2aWNlIChOTFMpMRQwEgYDVQQDDAtOTFMgUm9vdCBDQTAeFw0y\r\nNTAzMjAxMzIwMjZaFw0zNTAzMTkxMzIwMjZaMHoxCzAJBgNVBAYTAlVTMRMwEQYDVQQIDApDYWxp\r\nZm9ybmlhMQ8wDQYDVQQKDAZOdmlkaWExJzAlBgNVBAsMHk52aWRpYSBMaWNlbnNpbmcgU2Vydmlj\r\nZSAoTkxTKTEcMBoGA1UEAwwTTkxTIEludGVybWVkaWF0ZSBDQTCCAiIwDQYJKoZIhvcNAQEBBQAD\r\nggIPADCCAgoCggIBAKZ7bMxE1/PIL18Dnm31uaw9FjIVrCko1vcIOMpikaW77Oae/dFg/UiLV1yj\r\nGqrgwdQ+8odTG4+eGBeVA0nJJp++MtJWkxj0cnwu08/W2b411qCdAvhxqiYxHV3xt/LuoLqraCgH\r\nuy1vU0Pt2siFMJiLc37yMkjujDsht99Eb4gBVnvM90L6dBsQfqy4bnMC5ktOSf7QfQUTZRc8HzKw\r\n6FBfIat/WeazFemI4ZibDZE0a1NPyZIgCNdBZuWG+jx/GEotp41NBr9Bpt1YSs1rI0Zpb2HMjnlW\r\nMiNtctviR29+afG12hzTjPUPLLxY2k1mifX+1K2UkiZq/b/KRFOgOWkuTH9KnSHfOCdnQsS+gY2p\r\ntdblG/uYkQ3YH8J9qmH6/u5sU1Sw9VqnU9uhjAkxXR2xWEtS/cSGhk/GNTtHhOVCPClOiWdmTbI7\r\nl1Xn9pnr3CIyFtwFZhIFBTd/HPR5bM00AZmzWFWbal02k0l09Nx8bYZ0WvK+fPOfl7vrlKThOI2S\r\nE47dxXxT9v7d6Fg1xtm8ONsdmY90G2inT6+mOjgHl7AedyiZFW4FBeNl0cfGiNks+HpRlUMpYaGU\r\nB+2Pjy2R+u6tPDLsC6RzeurlgR5PwEOIb/eoDFE+WCuw/iKaBsuF9sVMC4vQd46p9nbT+/JLyFnP\r\niJjsTc0/g2zBeDPbAgMBAAGjYzBhMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgEGMB0G\r\nA1UdDgQWBBQ46ZTbRQAh77j3Jhoh8Bf2wr0ZlDAfBgNVHSMEGDAWgBTQPjF28/1NU9Q8yYjEdYIV\r\nyzkJfjANBgkqhkiG9w0BAQsFAAOCAgEAWcReY4P8KDgnEiHXhGu7uaCzj285bIghoCT8jARSxjDP\r\ntHASlgKsn20+igSoML8Ts8CGuWEKlPuIQTgfoMt0ybxXoDUJ1j/vCAULVjQex56WXadFgSrsgESZ\r\nVFc3JrrB6uuYteG3+Yfrdc/4J6WsE0ex/t0FLeohxumcjT3URPIdSNBKwh2KEbtKyu58BfjYtpu2\r\niQCFt+VJ66CJ8d7vS2UMSzQ+gotxYyEnxyrmxoEqMnc8Fj5WGVV70hV9mfnEUi7ESOq1Ei4nn3kp\r\nA3Kj2p5Vd4M88aLmC1I0SgUcDzxVdJF/798WHKZXSzlfiY3GarytXPxwdFutaD3jWtXNtlJlXEVI\r\nE3Pu/6BdLGT8QuwzML2n3ZI0OC9uA+03369+GA1AMuuYhJOm6etJ2bBniBNo3SkCUYuFaMTXJLVO\r\nvottHHwtnNVIX19KFNh9sO2vwW7FUXoXgPTkxeBToNtgDXUkQEGlAyQzr2KmkZrezZ2P5j/o/tgb\r\ntuhA2vvU41NYnWFUM4rLDSTSjTdB5c3k3IGdYrYs+ZR5cWQmyv7O7dlFeZxwBb0zaHZzgGaAAaIZ\r\nRL9YSMshPZFvxVtMSyBkWASSRMEKODYP6W/fnlM80SPaN1JuWKZ8JS0DlUlfoIEUduq/acHXPYnd\r\nLB1AoLT312tgy6B/HKzBPeCdFpQ0qOI=\r\n-----END CERTIFICATE-----"], "publicCert": "-----BEGIN CERTIFICATE-----\r\nMIIE2zCCAsOgAwIBAgIUbI4FSbGJm4+b98OLmMFCcTuUjkMwDQYJKoZIhvcNAQELBQAwejELMAkG\r\nA1UEBhMCVVMxEzARBgNVBAgMCkNhbGlmb3JuaWExDzANBgNVBAoMBk52aWRpYTEnMCUGA1UECwwe\r\nTnZpZGlhIExpY2Vuc2luZyBTZXJ2aWNlIChOTFMpMRwwGgYDVQQDDBNOTFMgSW50ZXJtZWRpYXRl\r\nIENBMB4XDTI1MDMyMDEzMjAyNloXDTM1MDMxOTEzMjAyNlowLzEtMCsGA1UEAwwkNGU1M2ExNzEt\r\nMTAzYi00OTQ2LTllZDgtNWY0YzBlZTc1MGQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC\r\nAQEArHvJrSRs/oJS2g84k/lK1Qn6CDJ3Ulx3GgJdgbmYRhkA3hMBEFdk2IbDnMGL3xwksH062xX3\r\n5tIT0OQF02eKKpB1NRQXcfSvyQmyrKX4nGbPABSMgQn+wIQV+7dZ4m/69Ipsql8ba8/+YqfPuQ+r\r\nLPbUJoPzgNUl/XiAiX0waoL3Oq/pw4/P27QrbbPsA0XwsWS6/9Wzg8MXL/sHmetaeNXDgdTUE8CO\r\nc0X3vLAZbp3hZIeTXiNAAZfcucy3tpg3YAC1fHQPZlVhMLd/VHS545qpwR9TtjD+bIGVBNifx+GW\r\nU2B7WMyLSCi2Fws5LAwHWZfnIg9mf4Uwhaw3grcTpQIDAQABo4GjMIGgMA4GA1UdDwEB/wQEAwID\r\nqDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwHQYDVR0OBBYEFO2Br3PxPeM2OQBfSrCk\r\nRbU04YpuMB8GA1UdIwQYMBaAFDjplNtFACHvuPcmGiHwF/bCvRmUMC8GA1UdEQQoMCaCJDRlNTNh\r\nMTcxLTEwM2ItNDk0Ni05ZWQ4LTVmNGMwZWU3NTBkOTANBgkqhkiG9w0BAQsFAAOCAgEAGz5VHUAn\r\nQqBesOApDemBF6SU/VZqcbXmBZLzrm2/wbNMEnVeYurTOVinyTkRJJHdnCMzCOPurW8rRBJGfhd4\r\nsRnNNciTtzle6nHYA84bwbp3rRBeejKYo6lrCEQQ63nxnH+cejpwm1A/BtvMs4r3Ebo2cy/YsLtn\r\nIvATqJ/niPD3ykdVPUhnRqX+6ki1AvKX1OYi2m0iq39ApmAtAstRJBKTsuny3up8n/iZEtn6Ds0l\r\ngGZH5pnMw3wHzy1cQQLI9+Jky0JFhu2DaPCJRypQncrP2ziydUAJgOE/wOwgOa/299Qw3/7NTGDH\r\nplBNboggu9u2YrSKF2nOIczbPWwEV4vNCjhIITCxc9p2di2pUR2qzC14RpA2p+sORSJkLm6voIzn\r\n74sC+u9cQdK4trytn86iX24Jn3ptBTAeTciGiNcQTWFHtWlpL6e54swmvGcHHhnmA8uU167f5NxY\r\nvFxVub7vKLVlvpdHIU+YWiB3zSr5PT4x2yTfCf+pbTVeVYz5/bx4QOkM9I+M2fKpuZQA35nmu+Of\r\nTEEaFW9+ssGc6txsjb82vn0yDxXzcZcmK49XNhn2egQZIyUCRUCxTG65BkV4mWkIF+E7juyWPTOd\r\nxfSjoXKjWQCm2cmHCBtaxs6kD383bSQtX2b4uxnma8dXdZxz5imb1VTL7JoVd+o9/lU=\r\n-----END CERTIFICATE-----", "publicKey": {"exp": 65537, "mod": ["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"]}}, "configToken": "eyJhbGciOiJSUzI1NiIsInR5cCI6IkpXVCJ9.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.db4MVvs7kUt6i4ffEok2doqXGUE_9vicssjxwfGA71VyI9OEnvJ7lJ60E6h_ScNEEYwAs_Ghy4OyK_Wk-yt_vh80sbyn5Vd-CKY1A4UgFmG20k2mFKUOpr7hmkfhxkCURUnC0auYwi9OEsNDOi8L05HmQjYbdtOBUH1VlaGVP2oPeeLX7PFPcvARP-Jhm6WppZ321zYC-M39OovdFtJIgVTMA5cJtFvfeHVzCXoo5ybmjtXPbS4ZN_5M3ua8osMEQgIlxsJSdYcD9wDNIiWSPKJuXJKKWtpBzG09FuN4ew7pU-jQ6Rcd6NIS3l7Fv68ooQSjHi4Bu7UAn4YXdXx14Q"}
|
|
```
|
|
|
|
it results in the same error messages
|
|
|
|
```
|
|
Mär 21 14:21:43 debian-grid-test nvidia-gridd[503]: NLS initialized
|
|
Mär 21 14:21:43 debian-grid-test nvidia-gridd[503]: Failed to verify public certificate (error:0A000126:SSL routines::unexpected eof while reading)
|
|
Mär 21 14:21:43 debian-grid-test nvidia-gridd[503]: Failed to verify public certificate (error:00000000:lib(0)::reason(0))
|
|
Mär 21 14:21:43 debian-grid-test nvidia-gridd[503]: Failed to validate public certificates
|
|
Mär 21 14:21:43 debian-grid-test nvidia-gridd[503]: Server configuration validation failed. Invalid certificate received from server.
|
|
Mär 21 14:21:43 debian-grid-test nvidia-gridd[503]: Failed to setup cloud License Manager: 3
|
|
Mär 21 14:21:43 debian-grid-test nvidia-gridd[503]: Shutdown (503)
|
|
Mär 21 14:21:43 debian-grid-test systemd[1]: nvidia-gridd.service: Main process exited, code=exited, status=1/FAILURE
|
|
Mär 21 14:21:43 debian-grid-test systemd[1]: nvidia-gridd.service: Failed with result 'exit-code'.
|
|
```
|
|
|
|
# Sources
|
|
|
|
- https://8gwifi.org/PemParserFunctions.jsp |