To verify that ASDC can not retrieve data from SDTP server with invalid (or expired) key and cert.

Prerequisite
  • Cumulus is deployed with an invalid or expired SDTP certificate, key
StepResponsible PartyDescriptionTest StepsExpected ResultsActual Results
1ASDC TesterTo verify sdtp-client lambda is running every 15 minutes

Go to AWS CloudWatch > Log groups > /aws/lambda/asdc2-uat-sdtp-client, check Last event time

Last event time is approximately 15 minutes apart
2ASDC Tester

To find certificate/key invalid message

Click Log stream link and check Log events for errors

Found an error message similar to this:

[ERROR] SSLError: HTTPSConnectionPool(host='sips-data.ssec.wisc.edu', port=443): Max retries exceeded with url: /rivet/v1/files?stream=UAT (Caused by SSLError(SSLError(1, '[SSL: SSL_HANDSHAKE_FAILURE] ssl handshake failure (_ssl.c:2635)')))
Traceback (most recent call last):
  File "/var/task/sdtp_client.py", line 24, in lambda_handler
    file_list = get_list_of_files(client_crt, client_key)
  File "/var/task/sdtp_client.py", line 69, in get_list_of_files
    response = requests.get(
  File "/opt/python/requests/api.py", line 73, in get
    return request("get", url, params=params, **kwargs)
  File "/opt/python/requests/api.py", line 59, in request
    return session.request(method=method, url=url, **kwargs)
  File "/opt/python/requests/sessions.py", line 587, in request
    resp = self.send(prep, **send_kwargs)
  File "/opt/python/requests/sessions.py", line 701, in send
    r = adapter.send(request, **kwargs)
  File "/opt/python/requests/adapters.py", line 563, in send
    raise SSLError(e, request=request)


3ASDC TesterTo verify data download 

List the content of s3://asdc2-uat-private/prefire/ periodically with aws cli or from AWS console


No files have been downloaded
Post Test Step
  • Deploy Cumulus with valid certificate and key 
  • Verify successful data download


  • No labels