Hello folks,
Hope you are doing great,
We noticed that the host's certificate has a incorrect hostname under the certificate's SAN
CLI also shows the same output:
The hostname is NODE1.LOCAL but it picked up xdevrv and added it to the very end, but done know how, the other 2 hosts have the correct values
We did find that under the /etc/hosts the name was wrong
We corrected this but when we regenerated it, it continued showing the bad FQDN
We'd like to know if you guys have seen something similar and know how to fix it or if there might be a different procedure or file that needs to be modified.
This is a 3 x 8.3.5 Proxmox CEPH cluster created for DEV
Hope you are doing great,
We noticed that the host's certificate has a incorrect hostname under the certificate's SAN
Code:
Subject Alternative Name:
127.0.0.1
0000:0000:0000:0000:0000:0000:0000:0001
localhost
192.168.254.21
NODE1
NODE1.LOCALxdevrvCLI also shows the same output:
Code:
NODE1:~# openssl x509 -in /etc/pve/nodes/NODE1/pve-ssl.pem -text -noout | grep -A1 "Subject Alternative Name"
X509v3 Subject Alternative Name:
IP Address:127.0.0.1, IP Address:0:0:0:0:0:0:0:1, DNS:localhost, IP Address:192.168.254.21, DNS:NODE1, DNS:NODE1.LOCALxdevrvThe hostname is NODE1.LOCAL but it picked up xdevrv and added it to the very end, but done know how, the other 2 hosts have the correct values
We did find that under the /etc/hosts the name was wrong
Code:
root@NODE1:~# cat /etc/hosts
127.0.0.1 localhost.localdomain localhost
192.168.254.21 NODE1.LOCALxdevrv NODE1
# The following lines are desirable for IPv6 capable hosts
::1 ip6-localhost ip6-loopback
fe00::0 ip6-localnet
ff00::0 ip6-mcastprefix
ff02::1 ip6-allnodes
ff02::2 ip6-allrouters
ff02::3 ip6-allhostsWe corrected this but when we regenerated it, it continued showing the bad FQDN
Code:
root@NODE1:~# rm -f /etc/pve/nodes/NODE1/pve-ssl.pem /etc/pve/nodes/NODE1/pve-ssl.key
root@NODE1:~# pvecm updatecerts -f
(re)generate node files
generate new node certificate
merge authorized SSH keysWe'd like to know if you guys have seen something similar and know how to fix it or if there might be a different procedure or file that needs to be modified.
This is a 3 x 8.3.5 Proxmox CEPH cluster created for DEV