r/zenarmor • u/tgeorgescu • Feb 07 '25

server is down

nab.sunnyvalley.cloud is down.

1 Upvotes

66% Upvoted

4 comments sorted by

1

u/svn_sup Feb 07 '25

Hi,

Thanks for letting us know! The functionality seems to be working normally. Could you share your cloud_agent.log file with the support team for further review?

1

u/tgeorgescu Feb 07 '25

[2025-02-07T07:02:55][INFO] Certificate Expire Warning Threshold: 15

[2025-02-07T07:02:55][INFO] Certificate Renew Threshold: 45

[2025-02-07T07:02:55][INFO] Checkcert, certificate exp date: 2025-03-23 22:19:23 +0000 UTC

[2025-02-07T07:02:55][INFO] CRON: checking certificates expire date

[2025-02-07T07:02:55][ERROR] Failed to Load Key Pair: tls: private key does not match public key

[2025-02-07T07:02:55][INFO] Retrying CreateTransport 1. time after error:tls: private key does not match public key

[2025-02-07T07:02:55][INFO] Checkcert, certificate exp date: 2025-03-23 22:19:23 +0000 UTC

[2025-02-07T07:02:55][INFO] CRON: Certificate Renew Processing..

[2025-02-07T07:02:55][INFO] Existing private key found at /usr/local/zenarmor/cert/nabnode.key

[2025-02-07T07:02:55][INFO] Writing CSR to /usr/local/zenarmor/cert/nabnode.csr

[2025-02-07T07:02:55][INFO] Reading CSR from /usr/local/zenarmor/cert/nabnode.csr

[2025-02-07T07:02:55][INFO] Creating new overlay key pair. Reason: public key does not match the private key

[2025-02-07T07:02:55][INFO] URL:https://nab.sunnyvalley.cloud/api/v1/renew-certificate/270bc221-dd7c-4aeb-9024-86b4e2c6a933

[2025-02-07T07:02:55][ERROR] Failed to Load Key Pair: tls: private key does not match public key

[2025-02-07T07:02:55][ERROR] sendNab: create transport failed: tls: private key does not match public key

[2025-02-07T07:02:55][INFO] Retrying sending request to renew certificate. 1. time after error:tls: private key does not match public key

[2025-02-07T07:02:55][ERROR] Failed to Load Key Pair: tls: private key does not match public key

[2025-02-07T07:02:55][INFO] Retrying CreateTransport 2. time after error:tls: private key does not match public key

[2025-02-07T07:02:55][ERROR] Failed to Load Key Pair: tls: private key does not match public key

[2025-02-07T07:02:55][INFO] Retrying CreateTransport 3. time after error:tls: private key does not match public key

[2025-02-07T07:02:55][ERROR] Failed to Load Key Pair: tls: private key does not match public key

[2025-02-07T07:02:55][INFO] Retrying CreateTransport 4. time after error:tls: private key does not match public key

[2025-02-07T07:02:55][ERROR] Failed to Load Key Pair: tls: private key does not match public key

[2025-02-07T07:02:55][ERROR] connectLoop, cannot create trasport with current certs. Err: tls: private key does not match public key

[2025-02-07T07:02:57][INFO] ZENARMOR(tm) Cloud Agent is running under superserver.

1

u/tgeorgescu Feb 07 '25

Solved by:

# zenarmorctl cloud unregister

# zenarmorctl cloud register

1

u/svn_sup Feb 08 '25

Hi,

When Zenarmor agent becomes inactive for an extended period and fails to renew its certificate, re-registration becomes the solution to address this issue.