Hi, I have a participant1_v1.conf file as shown below and I was configured the TLS option using self-signed certs
canton {
participants {
participant1 {
admin-api.port = 5011
admin-api.address = "0.0.0.0"
ledger-api {
address = "0.0.0.0"
port = 5012
tls {
cert-chain-file = "/canton/canton-node/keys/participant1.crt"
private-key-file = "/canton/canton-node/keys/participant1.pem"
trust-collection-file = "/canton/canton-node/keys/root-ca.crt"
}
}
storage = {
type = postgres
config {
dataSourceClass = "org.postgresql.ds.PGSimpleDataSource"
properties = {
user = "canton"
password = "canton"
databaseName = "participant1"
serverName = "participant1"
portNumber = 5432
}
}
}
}
}
}
while starting the node using below command, it is not starting as expected
docker run -it --name participant1 -p 5012:5012 --volume "$PWD/canton/canton-node:/canton/canton-node" --volume "$PWD/canton/canton-node/keys:/canton/canton-node/keys" -e JAVA_TOOL_OPTIONS="-Djavax.net.debug=all" digitalasset/canton-open-source --config /canton/canton-node/participant1_v1.conf --log-profile=container
logs from the container
Picked up JAVA_TOOL_OPTIONS: -Djavax.net.debug=ssl,handshake,certpath
INFO c.d.c.CantonCommunityApp$ - Starting Canton version 2.7.6
INFO c.d.c.CantonCommunityApp$ - Registered shutdown-hook.
javax.net.ssl|DEBUG|01|main|2025-02-10 15:03:31.515 UTC|SSLCipher.java:464|jdk.tls.keyLimits: entry = AES/GCM/NoPadding KeyUpdate 2^37. AES/GCM/NOPADDING:KEYUPDATE = 137438953472
javax.net.ssl|DEBUG|01|main|2025-02-10 15:03:31.519 UTC|SSLCipher.java:464|jdk.tls.keyLimits: entry = ChaCha20-Poly1305 KeyUpdate 2^37. CHACHA20-POLY1305:KEYUPDATE = 137438953472
DEBUG c.d.c.c.TlsServerConfig$ - Using 5 out of 11 Canton's default TLS ciphers
DEBUG c.d.c.e.CommunityEnvironment - participant1:admin-api=5011,ledger-api=5012
INFO c.d.c.e.CommunityEnvironment - Deriving 4 as number of threads from 'sys.runtime.availableProcessors()'. Please use '-Dscala.concurrent.context.numThreads' to override.
DEBUG c.d.c.c.ExecutionContextMonitor - Monitoring canton-env-execution-context
javax.net.ssl|DEBUG|03|Finalizer|2025-02-10 15:03:31.933 UTC|SSLSocketImpl.java:578|duplex close of SSLSocket
javax.net.ssl|DEBUG|03|Finalizer|2025-02-10 15:03:31.933 UTC|SSLSocketImpl.java:1760|close the SSL connection (passive)
javax.net.ssl|DEBUG|03|Finalizer|2025-02-10 15:03:31.934 UTC|SSLSocketImpl.java:578|duplex close of SSLSocket
javax.net.ssl|DEBUG|03|Finalizer|2025-02-10 15:03:31.934 UTC|SSLSocketImpl.java:1760|close the SSL connection (passive)
INFO a.e.s.Slf4jLogger - Slf4jLogger started
INFO c.d.c.e.CommunityEnvironment tid:b6a8d25871c644e261a87c1d4192b390 - Automatically starting all instances
INFO c.d.c.e.ParticipantNodes - Setting up database schemas for participant1
INFO c.d.c.r.DbStorage:participant1 tid:9b6b05a7cb46b6bd1410761c2ed77e0f - Overriding numThreads from 1 to 2 for the purpose of db migration, as flyway needs at least 2 threads.
DEBUG c.d.c.r.DbStorage:participant1 tid:9b6b05a7cb46b6bd1410761c2ed77e0f - Initializing database storage with config: Config(SimpleConfigObject({"connectionTimeout":5000,"dataSourceClass":"org.postgresql.ds.PGSimpleDataSource","initializationFailTimeout":1,"numThreads":2,"poolName":"slick-participant1-1","properties":{"databaseName":"participant1","password":"****","portNumber":5432,"serverName":"participant1","user":"canton"}}))
INFO c.z.h.HikariDataSource - slick-participant1-1 - Starting...
INFO c.z.h.HikariDataSource - slick-participant1-1 - Start completed.
DEBUG c.d.c.r.DbVersionCheck$:participant1 - Performing version checks
INFO o.f.c.i.l.VersionPrinter - Flyway Community Edition 9.15.2 by Redgate
INFO o.f.c.i.l.VersionPrinter - See release notes here: https://rd.gt/416ObMi
INFO o.f.c.i.l.VersionPrinter -
INFO o.f.c.i.d.b.BaseDatabaseType - Database: jdbc:postgresql://participant1:5432/participant1 (PostgreSQL 14.15)
DEBUG c.d.c.r.CommunityDbMigrations:participant1 tid:7a344acf2521067af5b45d763a041665 - Skip flyway migration on non-empty database
DEBUG c.d.c.r.CommunityDbMigrations:participant1 - Finished setting up database schemas after 717 milliseconds
INFO c.z.h.HikariDataSource - slick-participant1-1 - Shutdown initiated...
INFO c.z.h.HikariDataSource - slick-participant1-1 - Shutdown completed.
INFO c.d.c.p.ParticipantNodeBootstrap:participant=participant1 - Starting admin-api services on CommunityAdminServerConfig(0.0.0.0,Some(5011),None,Some(KeepAliveServerConfig(40s,20s,20s)),10485760)
INFO c.d.c.r.DbStorageSingle$:participant=participant1 - Creating storage, num-combined: 2
DEBUG c.d.c.r.DbStorage:participant=participant1 tid:3aa5013e1db133994292122afc850076 - Initializing database storage with config: Config(SimpleConfigObject({"connectionTimeout":5000,"dataSourceClass":"org.postgresql.ds.PGSimpleDataSource","initializationFailTimeout":1,"numThreads":2,"poolName":"slick-participant1-2","properties":{"databaseName":"participant1","password":"****","portNumber":5432,"serverName":"participant1","user":"canton"}}))
INFO c.d.c.p.ParticipantNodeBootstrap:participant=participant1 - Node is not initialized yet. Performing automated default initialization.
DEBUG c.d.c.p.ParticipantNodeBootstrap:participant=participant1 tid:8919e861e4c7696102eb9f229959843a - Skipping existing NamespaceDelegation(12202e51b003..., SigningPublicKey(id = 12202e51b003..., format = Tink, scheme = Ed25519), true)
DEBUG c.d.c.p.s.CantonSyncService:participant=participant1 tid:a97f21f9b2bf0402250c1d92200ad7d3 - Invoke crash recovery or initialize active participant
INFO c.d.c.p.s.CantonSyncService:participant=participant1 tid:a97f21f9b2bf0402250c1d92200ad7d3 - Recovering published timely rejections
INFO c.d.c.p.s.CantonSyncService:participant=participant1 tid:a97f21f9b2bf0402250c1d92200ad7d3 - Publishing the unpublished events from the ParticipantEventLog
