When trying to join a node to the master node it fails with the below error message. How can I force the join command to accept the other certificate? Currently it does not seem to be possible.
According to this line
if expects the IP to be listed as valid name in the other certificate. Since this is not possible with valid certificates I'd like to know an alternative using valid certificates.
Setup:
- 2 Nodes
- Both have valid LE certificates ( /etc/pmg/pmg-tls.pem and /etc/pmg/pmg-api.pem)
- HaProxy as frontend via https://IP:8443
- SSH password login denied for all EXCEPT IPs of cluster members (tested and working!)
- Firewall allows all communication between PMG IPs, no blocking
- rsync and scp tests between hosts work fine
Thanks in advance!
According to this line
Code:
cluster join failed: 500 Can't connect to MASTERIP:8006 (certificate verify failed)Setup:
- 2 Nodes
- Both have valid LE certificates ( /etc/pmg/pmg-tls.pem and /etc/pmg/pmg-api.pem)
- HaProxy as frontend via https://IP:8443
- SSH password login denied for all EXCEPT IPs of cluster members (tested and working!)
- Firewall allows all communication between PMG IPs, no blocking
- rsync and scp tests between hosts work fine
Code:
root@pmg2:~# pmgcm join MASTERIP
Enter password: ************
The authenticity of host 'MASTERIP' can't be established.
X509 SHA256 key fingerprint is xyxyxyxyxyxyxyxyxyxyxyxyxyxyxyxyxyxyxyxyxyxyxyxyxyxyxyxyxyxyxyxyxyxyxyxyxyxyxyxyxxyx.
Can't open join: No such file or directory at /usr/share/perl5/PVE/APIClient/LWP.pm line 149.
Can't open MASTERIP: No such file or directory at /usr/share/perl5/PVE/APIClient/LWP.pm line 149.
Use of uninitialized value $answer in pattern match (m//) at /usr/share/perl5/PVE/APIClient/LWP.pm line 151.
cluster join failed: 500 Can't connect to MASTERIP:8006 (certificate verify failed)
Are you sure you want to continue connecting (yes/no)?Thanks in advance!
