[Spce-user] NGCP-FRAUD Protection doesn't work in 4.3.1

[Victor Seva]

On 04/22/2016 11:39 AM, Matthias Hohl wrote:
> Hello,
> 
> today i found out that the ngcp-fraud-daily-lock and ngcp-fraud-auto-lock
> doesn't work on a subscriber with too much traffic in version 4.3.1.
> In version 4.2.1 it definitely works. 
> To solve this problem i checked the cronjob log and saw, that the cronjobs
> was executed.
> Then I tried to execute the commands directly and got this error:
> 
> 
> root at spce:/var/log# /usr/sbin/ngcp-fraud-daily-lock
> 500 Can't connect to 127.0.0.1:1442 (certificate verify failed) Can't
> connect to 127.0.0.1:1442 (certificate verify failed)
> SSL connect attempt failed error:14090086:SSL
> routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed at
> /usr/share/perl5/LWP/Protocol/http.pm line 49.
> 
> 
> root at spce:/var/log# /usr/sbin/ngcp-fraud-auto-lock
> 500 Can't connect to 127.0.0.1:1442 (certificate verify failed) Can't
> connect to 127.0.0.1:1442 (certificate verify failed)
> SSL connect attempt failed error:14090086:SSL
> routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed at
> /usr/share/perl5/LWP/Protocol/http.pm line 49.
> 
> 
> 
> Any idea to solve this problem?
> In changelog you wrote, that you updated the ngcp-fraud scripts for 4.3.1,
> so maybe there is something wrong?

This should be a problem with the certificate you are using. Are you
using a self-sign certificate?

There is a new config for disable the check for scripts:

security:
  ngcp_panel:
    scripts:
      restapi:
        sslverify: no


On production I would say you should not use self-sign certificates.
Maybe letsencrypt?

-- 
Victor Seva
Software Engineer

Phone: +43(0)1 301 2029
Email: vseva at sipwise.com
Website: www.sipwise.com

Particulars according Austrian Companies Code paragraph 14
"Sipwise GmbH“ - Europaring F15 – 2345 Brunn am Gebirge
FN:305595f, Commercial Court Vienna, ATU64002206

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 181 bytes
Desc: OpenPGP digital signature
URL: <http://lists.sipwise.com/pipermail/spce-user_lists.sipwise.com/attachments/20160422/a74be2d8/attachment-0001.asc>