-
Notifications
You must be signed in to change notification settings - Fork 1.9k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
tls verification issues after update to 0.6.2 #3126
Comments
testing |
@dadgar looks good! Those issues are gone. |
Awesome! Thank you so much for the quick turn around! |
thank you! |
hello, thanks, |
I'm going to lock this issue because it has been closed for 120 days ⏳. This helps our maintainers find and focus on the active issues. |
Nomad version
nomad 0.6.2
Operating system and Environment details
server and application clients: debian jessie
client that I am running this from: archlinux
Issue
After upgrading to 0.6.2 I get the following error when getting node and job status:
There are two really strange parts to this. In the first error message, which seems to be coming from the client:
error fetching node stats (HINT: ensure Client.Advertise.HTTP is set): Get https://orgs-0a0.stag.awse:4646/v1/client/stats: x509: certificate is valid for global.nomad, client.global.nomad, localhost, orgs-0a0.stag.awse, not client..nomad
Why does the client send the name
client..nomad
, as apposed toclient.global.nomad
?In the second error message:
Error querying node for running allocations: Get https://nomad.stag.awse:4646/v1/node/489da15e-1278-ce2a-e4e5-21d4f9df19ef/allocations: x509: certificate is valid for global.nomad, localhost, nomad-0ea.stag.awse, nomad.server.consul, nomad.stag.awse, server.global.nomad, not client..nomad
Why is it looking for a client certificate from the server?
Note that this has worked for several months without issue prior to the update.
Also, if I do
-tls-skip-verify
everything works fine.Nomad client config
Server config
The text was updated successfully, but these errors were encountered: