cert error on public controller: cannot validate certificate

[Roger Peppe]

To reproduce:

    juju login jaas
    juju list-models

The error seen is:

    ERROR cannot get model details: unable to connect to API: x509: cannot validate certificate for 162.213.33.28 because it doesn't contain any IP SANs

The logic in jujuclient is losing the public DNS name
in the APIAddresses field in the controller details
in controllers.yaml.

[John A Meinel (jameinel)]

I believe if we get a hostname we explicitly try to resolve it, and if that
fails we omit it. This is because MAAS frequently return hostnames that
only MAAS can resolve and not everyone configures their laptops to point at
MAAS DNS.

John
=:->

On May 23, 2017 18:10, "Roger Peppe" <email address hidden> wrote:

> Public bug reported:
>
> To reproduce:
>
> juju login jaas
> juju list-models
>
> The error seen is:
>
> ERROR cannot get model details: unable to connect to API: x509:
> cannot validate certificate for 162.213.33.28 because it doesn't contain
> any IP SANs
>
>
> The logic in jujuclient is losing the public DNS name
> in the APIAddresses field in the controller details
> in controllers.yaml.
>
> ** Affects: juju
> Importance: Undecided
> Status: New
>
> --
> You received this bug notification because you are subscribed to juju.
> Matching subscriptions: juju bugs
> https://bugs.launchpad.net/bugs/1692905
>
> Title:
> cert error on public controller: cannot validate certificate
>
> To manage notifications about this bug go to:
> https://bugs.launchpad.net/juju/+bug/1692905/+subscriptions
>

[Roger Peppe (rogpeppe)]

It hasn't always been like this - this bug was introduced with https://github.com/juju/juju/pull/7324.

[Menno Finlay-Smits (menno.smits)]

If I try the repro steps "juju list-models" works for me. What's different?

[Roger Peppe (rogpeppe)]

This was fixed by PR 7438.

[Menno Finlay-Smits (menno.smits)]

Ok thanks!