SUPPORT / SAMPLES & SAS NOTES
 

Support

Problem Note 70713: The error message "certificate is valid for example1, example2, not localhost" occurs when services connect to SAS® Configuration Server (Consul)

DetailsHotfixAboutRate It

After applying recent SAS® Viya® 3.5 updates, the Transport Layer Security (TLS) certificate for SAS Configuration Server (Consul) might no longer contain localhost in the Subject Alternative Names, leading to error messages similar to the following:

tls: failed to verify certificate: x509: certificate is valid for server.example.com, localhost.localdomain, not localhost

This issue occurs due to a recent change in sas-bootstrap-config. The changed behavior might not retrieve localhost and other local host names from the /etc/hosts file, depending on the order of names in the file.

To work around this problem, complete the steps in (Optional) Configure Network Settings of the SAS Viya 3.5 Administration to configure the SAS_SAN_DNS variable, ensuring that the variable contains localhost and all other desired Subject Alternative Names.

Click the Hot Fix tab in this note for a link to instructions about accessing and applying the software update.



Operating System and Release Information

Product FamilyProductSystemProduct ReleaseSAS Release
ReportedFixed*ReportedFixed*
SAS SystemSAS Viya 3.xLinux for x643.5Viya 3.5
* For software releases that are not yet generally available, the Fixed Release is the software release in which the problem is planned to be fixed.