Certificate Error on console

[informant]

Hi, we have a ssl certificate error on open a console:

Error: TLS handshake failed javax.net.ssl.SSLHandshakeException: java.security.CertificateException: certificate does not match

What can we do here?

regards

 

[informant]

Hi,

this error comes after adding a node. Before it´s works fine. Can you help us please to solve this issue. thanks


regards

 

[informant]

We have found a solution.

The command

pvecm updatecerts

does not work for this error.

we must use

pvecm updatecerts --force

.

After this the issue is solved.

regards

 

[loisl]

I have a Certifikate from SARTssl

# pvecm updatecerts --force

Signature ok
subject=/OU=PVE Cluster Node/O=Proxmox Virtual Environment/CN=x***.s*********r.eu
Getting CA Private Key
CA certificate and CA private key do not match
204732:error:0B080074:x509 certificate routines:X509_check_private_key:key values mismatch:x509_cmp.c:406:
unable to generate pve ssl certificate:
command 'openssl x509 -req -in /tmp/pvecertreq-204730.tmp -days 3650 -out /etc/pve/nodes/x706/pve-ssl.pem -CAkey /etc/pve/priv/pve-root-ca.key -CA /etc/pve/pve-root-ca.pem -CAserial /etc/pve/priv/pve-root-ca.srl -extfile /tmp/pvesslconf-204730.tmp' failed: exit code 1

 

[mir]

/etc/pve/pve-root-ca.pem

Has this ca.pem been replaced with the ca.pem from startssl?

 

[loisl]

many THX@mir

cp /etc/pve/local/pve-ssl.pem /etc/pve/pve-root-ca.pem

and my problem is solved;-)