Problem Note 70713: The error message "certificate is valid for example1, example2, not localhost" occurs when services connect to SAS® Configuration Server (Consul)
After applying recent SAS® Viya® 3.5 updates, the Transport Layer Security (TLS) certificate for SAS Configuration Server (Consul) might no longer contain localhost in the Subject Alternative Names, leading to error messages similar to the following:
tls: failed to verify certificate: x509: certificate is valid for server.example.com, localhost.localdomain, not localhost
This issue occurs due to a recent change in sas-bootstrap-config. The changed behavior might not retrieve localhost and other local host names from the /etc/hosts file, depending on the order of names in the file.
To work around this problem, complete the steps in (Optional) Configure Network Settings of the SAS Viya 3.5 Administration to configure the SAS_SAN_DNS variable, ensuring that the variable contains localhost and all other desired Subject Alternative Names.
Click the Hot Fix tab in this note for a link to instructions about accessing and applying the software update.
Operating System and Release Information
SAS System | SAS Viya 3.x | Linux for x64 | 3.5 | | Viya 3.5 | |
*
For software releases that are not yet generally available, the Fixed
Release is the software release in which the problem is planned to be
fixed.
Type: | Problem Note |
Priority: | high |
Date Modified: | 2024-03-27 16:17:24 |
Date Created: | 2024-03-19 11:11:46 |