[NETCONF-650] Creating a TLS mount w/o a key in keystore results in karaf.log filling up (not logging at ERROR, gating gets skipped)

Tue, 2 May 2023 19:21:47 +0000

This is an operational issue that can result in all disk space filling up on the ODL VM.

Mounting a new netconf-over-TLS mountpoint without preconfiguring the keystore correctly results in extremely fast fail+remounts happening, which then fills up the logs and potentially kills the controller.

See karaf.log.2 (attached)

2019-11-06T12:16:50,920 | INFO | nioEventLoopGroupCloseable-3-5 | AbstractNetconfSessionNegotiator | 316 - org.opendaylight.netconf.netty-util - 1.6.1 | Unexpected error during negotiation
java.lang.IllegalStateException: java.security.KeyStoreException: No keystore private key found

Fixes in Neon, Sodium, and Master/Mg are desirable (ONAP intends to release on Neon).

Thanks

OpenDaylight JIRA

[NETCONF-650] Creating a TLS mount w/o a key in keystore results in karaf.log filling up (not logging at ERROR, gating gets skipped)