[14_0_X] Tier0Handler: add maxTime, improve cert warning

[JanChyczynski]

PR description:

Before this PR Tier0Handler was running a curl command using only the --connect-timeout flag which sets the timeout for connecting. If the connection is established but the server takes forever to respond, the command waits indefinitely. To avoid hung-up processes maxTime argument was added to Tier0Handler setting the --max-time flag. This flag sets the maximum time for the whole curl command.

Tier0Handler is used in the conddb command and the maxTime was set to 60 s, the connection timeout was left at 1 s.

Also, extends the warning information when the certificates are not provided with information about the X509_USER_CERT and X509_USER_KEY env variables.

This is a follow-up to #45779

PR validation:

Tested by running python3 tier0.py which is running the test for it and by running conddb showFSCR (for the latter scram b is needed beforehand).

The proper functionality of --connect-timeout and --max-time in Tier0Handler was tested by changing the T0 API URL using the TIER0_API_URL env variable to:

• http://localhost:8099/ and running nc -kl 8099 to test being able to connect but never receiving a response
• https://example.com:81/ to test the connection timeout

Backport

Backport of #45943 to 14_0_X

FYI @perrotta @francescobrivio @PonIlya

[cmsbuild]

A new Pull Request was created by @JanChyczynski for CMSSW_14_0_X.

It involves the following packages:

• CondCore/Utilities (db)

@cmsbuild, @consuegs, @francescobrivio, @perrotta, @saumyaphor4252 can you please review it and eventually sign? Thanks.
@JanChyczynski, @PonIlya, @mmusich, @rsreds, @yuanchao this is something you requested to watch as well.
@antoniovilela, @mandrenguyen, @rappoccio, @sextonkennedy you are the release manager for this.

cms-bot commands are listed here

• Backported from Tier0Handler: add maxTime, improve cert warning #45943

[cmsbuild]

cms-bot internal usage

[perrotta]

backport of #45943

[perrotta]

please test

• This is a verbatim backport of Tier0Handler: add maxTime, improve cert warning #45943: let have it tested also in the previous cycles

[cmsbuild]

+1

Size: This PR adds an extra 12KB to repository
Summary: https://cmssdt.cern.ch/SDT/jenkins-artifacts/pull-request-integration/PR-0a7d91/41394/summary.html
COMMIT: e218318
CMSSW: CMSSW_14_0_X_2024-09-08-0000/el8_amd64_gcc12
User test area: For local testing, you can use /cvmfs/cms-ci.cern.ch/week0/cms-sw/cmssw/45945/41394/install.sh to create a dev area with all the needed externals and cmssw changes.

Comparison Summary

Summary:

• You potentially removed 8 lines from the logs
• Reco comparison results: 51 differences found in the comparisons
• DQMHistoTests: Total files compared: 48
• DQMHistoTests: Total histograms compared: 3346637
• DQMHistoTests: Total failures: 9
• DQMHistoTests: Total nulls: 0
• DQMHistoTests: Total successes: 3346608
• DQMHistoTests: Total skipped: 20
• DQMHistoTests: Total Missing objects: 0
• DQMHistoSizes: Histogram memory added: 0.0 KiB( 47 files compared)
• Checked 202 log files, 165 edm output root files, 48 DQM output files
• TriggerResults: no differences found

[perrotta]

+db

[cmsbuild]

This pull request is fully signed and it will be integrated in one of the next CMSSW_14_0_X IBs (tests are also fine) and once validation in the development release cycle CMSSW_14_2_X is complete. This pull request will now be reviewed by the release team before it's merged. @antoniovilela, @mandrenguyen, @sextonkennedy, @rappoccio (and backports should be raised in the release meeting by the corresponding L2)

[mandrenguyen]

+1