Error while testing conenction to kmip server

[emanuelebeffa]

I am using a Docker image as a server to create and store encryption keys for my NAS. However, I'm experiencing an error when trying to connect the NAS to the server. The connection fails, and I'm unable to proceed with the encryption setup.

Expected behavior

The NAS should connect to the server successfully

Actual behavior

The connection attempt from the NAS to the Docker key server succeeds, but gives the following logs in the console:

dsm-kmip-server  | Exception in thread 00000001:
dsm-kmip-server  | Traceback (most recent call last):
dsm-kmip-server  |   File "/usr/lib/python3.11/threading.py", line 1045, in _bootstrap_inner
dsm-kmip-server  |     self.run()
dsm-kmip-server  |   File "/usr/lib/python3.11/site-packages/kmip/services/server/session.py", line 116, in run
dsm-kmip-server  |     self._connection.shutdown(socket.SHUT_RDWR)
dsm-kmip-server  |   File "/usr/lib/python3.11/ssl.py", line 1353, in shutdown
dsm-kmip-server  |     super().shutdown(how)
dsm-kmip-server  | OSError: [Errno 107] Socket not connected

While everything seems fine, the NAS won't save any encryption key to the server (the sqlite database is always empty) after resetting the encryption key from the storage settings.

Steps to reproduce

Run the Docker container
Attempt to connect from the NAS to the Docker server to access the keys

Environment

DSM 7.2.2-72803

[l0rda]

You need to use CA certificate file from certs folder while connecting to KMIP server.

[emanuelebeffa]

Yeah I used the CA from the certs folder in the KMIP section, but it seems that the error is not related to the certificate

[xpiwA]

I do have the same identical issue presented here.

[makkanftw]

Facing exact same issue as above using CA cert etc correctly. Any help would be appreciated.

[rnurgaliyev]

Can you post logs from the NAS itself?

[makkanftw]

I ran:
sudo /usr/syno/bin/synokmip --query
An error occurred while connecting to appliance {IP_of_KMIP_server}: [SSL: TLSV1_ALERT_UNKNOWN_CA] tlsv1 alert unknown ca (_ssl.c:1131)

Turns out I had missed step on certificate view to click settings and select the correct certificate for KMIP. Works fine after following instructions properly...