[GitHub] [apisix] deepzz0 commented on issue #5650: request help: etcd tls connect handshake failed

[GitBox <gi...@apache.org>]

deepzz0 commented on issue #5650:
URL: https://github.com/apache/apisix/issues/5650#issuecomment-982541062


   Upgrading to Apisix version 2.11.0 has been resolved, but but a new error appeared:
   ```
   11/30 11:16:28 [warn] 49#49: *22332 [lua] v3.lua:151: _request_uri(): https://172.19.65.156:2379: certificate host mismatch. Retrying, context: ngx.timer
   2021/11/30 11:16:28 [warn] 49#49: *22332 [lua] v3.lua:151: _request_uri(): https://172.19.65.156:2379: certificate host mismatch. Retrying, context: ngx.timer
   2021/11/30 11:16:28 [warn] 49#49: *22332 [lua] health_check.lua:90: report_failure(): update endpoint: https://172.19.65.156:2379 to unhealthy, context: ngx.timer
   ```
   
   My config:
   ```
   etcd:
     host:                                 # it's possible to define multiple etcd hosts addresses of the same etcd cluster.
       - "https://172.19.65.156:2379"             # multiple etcd address
       - "https://172.19.178.146:2379"             # multiple etcd address
       - "https://172.19.125.95:2379"             # multiple etcd address
     prefix: "/apisix"     # apisix configurations prefix
     timeout: 30   # 30 seconds
     tls:
       cert: "/etcd-ssl/tls.crt"
       key: "/etcd-ssl/tls.key"
       verify: true
   ```
   
   my etcd cert:
   ```
   09v3 extensions:
               X509v3 Key Usage: critical
                   Digital Signature, Key Encipherment
               X509v3 Extended Key Usage: 
                   TLS Web Server Authentication, TLS Web Client Authentication
               X509v3 Basic Constraints: critical
                   CA:FALSE
               X509v3 Subject Key Identifier: 
                   94:03:8D:57:B1:80:16:B1:24:F1:FB:54:84:48:D9:85:3D:50:A5:1A
               X509v3 Authority Key Identifier: 
                   keyid:D8:91:86:C9:95:9D:40:22:31:17:18:30:8C:0E:90:2A:AD:07:84:31
   
               X509v3 Subject Alternative Name: 
                   IP Address:172.19.65.156, IP Address:172.19.125.95, IP Address:172.19.178.146, IP Address:127.0.0.1
   ```
   
   what's wrong?


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: notifications-unsubscribe@apisix.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org