Unable to pass Node API test 20 with HTTPS

[akanashin]

Hey! I
I'm having some issues with the idea of what I'm expected to do here.

Setting up: Proto=HTTPS, Address of my node is given as 127.0.0.1:8445

The test fails with None of the "Node 'api.endpoints' match the current protocol, IP/hostname and port" if I put hostname to Self/API/Endpoint/Host for HTTPS proto.

IP address is not allowed in the field according to source code of the utility (IS0401Test.py:1305):
if endpoint["protocol"] == "https" and is_ip_address(endpoint["host"]): api_endpoint_host_warn = True

However, all other tests finish successfully so I think this is not related to HTTPS certificates validation (that was my first guess).

If I put my hostname to address field of the WebUI of the utility i get a message: "Error: No API found at https://ThinkPad:8445/x-nmos/node/v1.3/" and nothing works.

So, the question here: what is the reason for this requirement in the test? And how do i make it pass successfully?

Thanks

[jonathan-r-thorpe]

When testing with HTTPS the testing tool expects that you are using the host name consistent with the digital certificate being served by the NMOS Node, and not an IP addresses, which is why you get the warning.

In your example, "Error: No API found at https://thinkpad:8445/x-nmos/node/v1.3/" suggests that you have used ThinkPad as the host name, but your system is unable to resolve this to an IP address. You could solve this by adding ThinkPad 127.0.0.1 as an entry to your local machine's hosts file.

[akanashin]

Thanks.
This info is in /etc/hosts file.
And test utility works fine when i test HTTP protocol.
I see issue when using "ThinkPad" as a host for HTTPS only.

[lo-simon]

If you want to use the default configuration of the nmos-testing. I suggest you set up your test node using the API's RSA and ECDSA certificates provided in the \test_data\BCP00301\ca\intermediate\certs directory, rsa.api.testsuite.nmos.tv.cert.chain.pem and ecdsa.api.testsuite.nmos.tv.cert.chain.pem.

Depending on your next step, use unicast DNS or multicast DNS.

multicast DNS

Doing multicast DNS is earlier, just configure the nmos-testing configuration.
CONFIG.ENABLE_HTTPS = True in your UserConfig.py as suggested in isssue....

Insert the following line in the nmos-testing machine's hosts file
{your Node ipaddress} nmos-api.local

In the test-suite UI, for example, for the test suite IS-04 Node API, set the Node API IP/Hostname to nmos-api.local and the Port to your Node's port number.

unicast DNS

If you want to do unicast DNS, you will need to insert the following in the hosts files:

In the nmos-testing machine's hosts file, insert:
{your Node ipaddress} api.testsuite.nmos.tv

In your Node's hosts file, insert:

{nmos-testing machine ipaddress}     mocks.testsuite.nmos.tv
{nmos-testing machine ipaddress}     ocsp.testsuite.nmos.tv

In the test-suite UI, set the Node API IP/Hostname to api.testsuite.nmos.tv