8000 x509: certificate is not valid for any names, but wanted to match keycloak.infra.svc · Issue #9087 · keycloak/keycloak · GitHub
[go: up one dir, main page]

Skip to content

x509: certificate is not valid for any names, but wanted to match keycloak.infra.svc #9087

Closed

Description

@droslean

Describe the bug

I've been struggling to configure my krakend to perform authentication by reaching keycloak through the service that exists in the same namespace as krakend.

My keycloak holds those two fields:

    externalURL: https://keycloak.local
    internalURL: https://keycloak.infra.svc:8443

I don't have any idea how the externalURL was populated but it is wrong and this should be considered as a BUG.

Trying to reach keycloak from the internalURL fails miserably with a certification error:

Error #01: Post "https://keycloak.infra.svc:8443/auth/realms/master/protocol/openid-connect/token": Post "https://keycloak.infra.svc:8443/auth/realms/master/protocol/openid-connect/token": x509: certificate is not valid for any names, but wanted to match keycloak.infra.svc

Version

quay.io/keycloak/keycloak:latest

Expected behavior

No response

Actual behavior

No response

How to Reproduce?

No response

Anything else?

No response

Activity

  1. locked and limited conversation to collaborators on Dec 22, 2021
  2. converted this issue into a discussion #9304 on Dec 22, 2021
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    kind/bugCategorizes a PR related to a bug

    Type

    No type

    Fields

    No fields configured for issues without a type.

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions

      0