Skip to content

ct_monitor: Use HTTP endpoint instead of pRPC for acme-info#421

Merged
kvinwang merged 3 commits into
masterfrom
fix-ct-monitor-endpoint
Jan 5, 2026
Merged

ct_monitor: Use HTTP endpoint instead of pRPC for acme-info#421
kvinwang merged 3 commits into
masterfrom
fix-ct-monitor-endpoint

Conversation

@h4x3rotab

Copy link
Copy Markdown
Contributor

Summary

  • Fix ct_monitor to use HTTP /acme-info endpoint instead of pRPC
  • The gateway exposes /acme-info as HTTP, but ct_monitor was calling pRPC which caused 405 errors
  • Root cause: gateway pRPC uses trim: "Tproxy." so it expects Tproxy.* method names
  • Removes unused dstack-gateway-rpc and ra-rpc dependencies

Test plan

  • Build: cargo build --release -p ct_monitor
  • Test against production gateway: ./target/release/ct_monitor --gateway-uri https://gateway.dstack-pha-prod7.phala.network --domain dstack-pha-prod7.phala.network
  • Verified it successfully fetches public keys and checks certificate logs

🤖 Generated with Claude Code

The gateway exposes /acme-info as an HTTP endpoint, but ct_monitor was
using pRPC which expects Tproxy.* method names due to the gateway's
`trim: "Tproxy."` configuration. This caused 405 Method Not Allowed
errors.

Switch to using the HTTP /acme-info endpoint directly, which returns
JSON with hex-encoded public keys.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
Comment thread ct_monitor/src/main.rs Fixed
h4x3rotab and others added 2 commits December 31, 2025 11:43
Remove dangerous `danger_accept_invalid_certs(true)` - gateway uses valid certs.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
@kvinwang

kvinwang commented Jan 4, 2026

Copy link
Copy Markdown
Collaborator

Appended quote verification. try with:

cargo run --release -p ct_monitor -- --gateway dstack-pha-prod9.phala.network --verifier-url https://c1fe8e00c02a6a382ff0e8e7f5ab2e6433508e6d-8080.tdxlab.dstack.org:12004/

@kvinwang
kvinwang merged commit 36f4151 into master Jan 5, 2026
10 checks passed
kvinwang added a commit that referenced this pull request Jan 19, 2026
ct_monitor: Use HTTP endpoint instead of pRPC for acme-info
@kvinwang
kvinwang deleted the fix-ct-monitor-endpoint branch January 21, 2026 06:23
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants