novox/hq
3
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

Issue 129: three machines of four trust the mesh, not one #201

Merged
jschoubben merged 1 commits from issue/129-three-machines-not-one into main 2026-09-30 00:30:31 +00:00
Conversation 0 Commits 1 Files Changed 2
+26 -6
jschoubben commented 2026-09-30 00:30:24 +00:00
Owner
Copy Link
Copy Source

Extended after the first was proven reversible. Every converged machine now holds the anchor and verifies an internal name with a plain client:

novox    mesh CA: 1    https://git.<node>.internal/ -> 200
g14      mesh CA: 1    https://git.<node>.internal/ -> 200
shanks   mesh CA: 1    https://git.<node>.internal/ -> 200

Before, the two unassigned ones answered curl: (60) … unable to get local issuer certificate (20) and held no entry for the mesh.

ace is excluded on purpose — it is adopted, so a module assigned there is held rather than run, which is correct and is not trust.

Both the resolution and ADR 0147's insight said "one machine of four", which was true for about twenty minutes.

Extended after the first was proven reversible. Every converged machine now holds the anchor and verifies an internal name with a plain client: ``` novox mesh CA: 1 https://git.<node>.internal/ -> 200 g14 mesh CA: 1 https://git.<node>.internal/ -> 200 shanks mesh CA: 1 https://git.<node>.internal/ -> 200 ``` Before, the two unassigned ones answered `curl: (60) … unable to get local issuer certificate (20)` and held no entry for the mesh. `ace` is excluded on purpose — it is adopted, so a module assigned there is held rather than run, which is correct and is not trust. Both the resolution and ADR 0147's insight said "one machine of four", which was true for about twenty minutes.
jschoubben added 1 commit 2026-09-30 00:30:25 +00:00
Issue 129: three machines of four trust the mesh, not one d009c3efef 
Extended after the first was proven. Every converged machine now holds
the anchor and verifies an internal name with a plain client; before,
the two unassigned ones answered 'unable to get local issuer
certificate' and held no entry for the mesh.

ace is excluded on purpose: it is adopted, so a module assigned there is
held rather than run, which is right and is not trust.

Both the resolution and 0147's insight said one machine of four, which
was true for about twenty minutes.
jschoubben merged commit 601d004fcb into main 2026-09-30 00:30:31 +00:00
jschoubben deleted branch issue/129-three-machines-not-one 2026-09-30 00:30:31 +00:00
Sign in to join this conversation.
Reviewers
No Reviewers
Labels
No items
No labels
Milestone
No items
No Milestone
Assignees
Clear assignees
jschoubben miel.truyen
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: novox/hq#201