ipa-client-install failed with [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: Hostname mismatch
Issue
ipa-client-install
fails with error:
ssl.SSLCertVerificationError: [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: Hostname mismatch, certificate is not valid for 'ipaserver.example.com'. (_ssl.c:1129)
2023-01-12T12:48:13Z INFO Connection to https://ipaserver.example.com/ipa/json failed with [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: Hostname mismatch, certificate is not valid for 'ipaserver.example.com'. (_ssl.c:1129)
- IPA server HTTPS server cert has already got correct CN in the subject name:
subject=/O=EXAMPLE.COM/CN=ipaserver.example.com
Environment
- RHEL client 9.1
- RHEL server 7.9
- IPA
Subscriber exclusive content
A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.