[SOLVED] Connect to PBS fails due hostname verification

[buchey]

Hello,

I'm trying to connect my PBS to my PVE cluster.

Ping and curl/telnet to pbs-host:8007 are working, but either the GUI nor the console can successful connect.

Steps I've tried:

proxmox-backup-client version --repository pbs-host:BackupPool1
Password for "root@pam": ***********
storing login ticket failed: $XDG_RUNTIME_DIR must be set
client version: 3.1.4
server version: 3.2.2

Further:

# pvesm add pbs pbs-region-1 --server pbs-host.mydomain.example --datastore BackupPool1
create storage failed: pbs-region-1: error fetching datastores - 500 Can't connect to pbs-host.mydomain.example:8007 (hostname verification failed)

Any ideas on this appreciated!

 

[B.Otto]

Did you replace some parts of the command? Because I don't think DNS resolution will work with the pbs-host.mydomain.example
FQDN. What DNS server have you configured in your PVE host? Does pinging pbs-host work?

 

[buchey]

Did you replace some parts of the command? Because I don't think DNS resolution will work with the pbs-host.mydomain.example
FQDN.

Correct. Just redacted them due customer-related hostnames.

 

[buchey]

Does pinging pbs-host work?

Yes, DNS works fine and as mentioned I'm able to ping and telnet the pbs-host.

 

[buchey]

There was indeed a typo in our customers certificate and mismatched the SAN.

to verify i used:

openssl s_client -connect myhostname.example.com:443 -servername myhostname.example.com | openssl x509 -noout -text | grep -A1 "Subject Alternative Name"