ipa-client-install failed with [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: Hostname mismatch

Solution Verified - Updated -

Issue

  1. ipa-client-install fails with error:
ssl.SSLCertVerificationError: [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: Hostname mismatch, certificate is not valid for 'ipaserver.example.com'. (_ssl.c:1129)
2023-01-12T12:48:13Z INFO Connection to https://ipaserver.example.com/ipa/json failed with [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: Hostname mismatch, certificate is not valid for 'ipaserver.example.com'. (_ssl.c:1129)
  1. IPA server HTTPS server cert has already got correct CN in the subject name: subject=/O=EXAMPLE.COM/CN=ipaserver.example.com

Environment

  • RHEL client 9.1
  • RHEL server 7.9
  • IPA

Subscriber exclusive content

A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.

Current Customers and Partners

Log in for full access

Log In

New to Red Hat?

Learn more about Red Hat subscriptions

Using a Red Hat product through a public cloud?

How to access this content