PowerFlex: Gateway high availability connection not trusted

摘要: Gateways configured for high availability using HAProxy and Keepalive, with a virtual IP address (VIP) HAProxy certificate's Common Name (CN) differs from the address used to access the Gateway. ...

本文适用于 本文不适用于 本文并非针对某种特定的产品。 本文并非包含所有产品版本。
查看其他资源

症状

HTTP clients, curl, browser, etc., report that the connection to the Gateway is not secure.

Connection to the Gateway cannot be trusted by clients.

原因

Clients access the Gateways using the VIP's FQDN or VIP.

Clients are presented with the HAProxy's certificate, which contains a different CN.

As the certificate's CN and the address used to access the Gateway differ, clients cannot verify the certificate's authenticity.

解决方案

This is NOT a PowerFlex issue.

Workaround:     
Reissue HAProxy's certificate using the FQDN or IP address used to access the gateway (VIP's FQDN or VIP).
Access the Gateway using the VIP's FQDN or VIP.



受影响的产品

PowerFlex Software, VxFlex Product Family, VxFlex Ready Node, ScaleIO Ready Node-PowerEdge 13G, Ready Node Series
文章属性
文章编号: 000182613
文章类型: Solution
上次修改时间: 11 11月 2025
版本:  5
从其他戴尔用户那里查找问题的答案
支持服务
检查您的设备是否在支持服务涵盖的范围内。