rancher 安装 server certificate verification failed

左手的ㄟ右手 2023-06-30 08:48 4阅读 0赞

添加host的时候出现:

https://192.168.2.42:8080/v1 is not accessible (server certificate verification failed. CAfile: /etc/ssl/certs/ca-certificates.crt CRLfile: none)

原因很简单:启动了https,却没有指定证书,修改如下  
![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl8zODc1MTUxMw_size_16_color_FFFFFF_t_70]  
修改主机的地址不采用https,然后保存后正常加入集群

或者可以采用https,手动生成证书

mkdir -p  /rancher/privatekey       
    mkdir -p /rancher/certs/
    openssl genrsa -out /rancher/privatekey/rancher.key 2048  
    openssl req -new -key /rancher/privatekey/rancher.key -out /rancher/certs/rancher.csr   #需要输入证书信息,随便填就行
    openssl x509 -req -days 1825 -in /rancher/certs/rancher.csr -signkey /rancher/privatekey/rancher.key -out /rancher/certs/rancher.crt

![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl8zODc1MTUxMw_size_16_color_FFFFFF_t_70 1]将证书填入即可,主机加入host的时候需要指定生成的证书(本人暂未测试)

[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl8zODc1MTUxMw_size_16_color_FFFFFF_t_70]: https://img-blog.csdnimg.cn/20200116095127558.png?x-oss-process=image/watermark,type_ZmFuZ3poZW5naGVpdGk,shadow_10,text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl8zODc1MTUxMw==,size_16,color_FFFFFF,t_70
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl8zODc1MTUxMw_size_16_color_FFFFFF_t_70 1]: https://img-blog.csdnimg.cn/20200116095253206.png?x-oss-process=image/watermark,type_ZmFuZ3poZW5naGVpdGk,shadow_10,text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl8zODc1MTUxMw==,size_16,color_FFFFFF,t_70