problem with kernalcare ssl.CertificateError:

Collapse
X
Collapse
 
  • Page of 1
  • Time
  • Show
Clear All
new posts
Previous template Next
  • jiroun
    Junior Member
    • Aug 2025
    • 2
    #1

    problem with kernalcare ssl.CertificateError:

    [root@server ~]# kcarectl --set-patch-type free
    Traceback (most recent call last):
    File "/usr/libexec/kcare/python/kcarectl/__main__.py", line 18, in <module>
    sys.exit(main())
    File "/usr/libexec/kcare/python/kcarectl/__init__.py", line 1895, in main
    update_patch_type(args.set_patch_type)
    File "/usr/libexec/kcare/python/kcarectl/__init__.py", line 1435, in update_patch_type
    if probe_patch(fetch_patch_level(reason='probe'), config.PATCH_TYPE):
    File "/usr/libexec/kcare/python/kcarectl/__init__.py", line 551, in fetch_patch_level
    response = _fetch_patch_level_request(khash, latest, reason, mode)
    File "/usr/libexec/kcare/python/kcarectl/__init__.py", line 530, in _fetch_patch_level_request
    url = kcare.get_kernel_prefixed_url(khash, stickyfy(latest, mode)) + '?' + request_param
    File "/usr/libexec/kcare/python/kcarectl/kcare.py", line 93, in get_kernel_prefixed_url
    return utils.get_patch_server_url(config.PREFIX, *parts)
    File "/usr/libexec/kcare/python/kcarectl/utils.py", line 194, in get_patch_server_url
    return '/'.join(it.strip('/') for it in filter(None, (ipv6_support.get_patch_server(),) + parts))
    File "/usr/libexec/kcare/python/kcarectl/ipv6_support.py", line 130, in get_patch_server
    return config.PATCH_SERVER_IPV6 if ip_proto_selector.is_ipv6_preferred() else config.PATCH_SERVER
    File "/usr/libexec/kcare/python/kcarectl/ipv6_support.py", line 72, in is_ipv6_preferred
    ipv6_license = self._get_cln_license(ipv6=True)
    File "/usr/libexec/kcare/python/kcarectl/ipv6_support.py", line 113, in _get_cln_license
    content = utils.nstr(http_utils.urlopen(url, retry_on_500=False).read()) # type: ignore[no-untyped-call]
    File "/usr/libexec/kcare/python/kcarectl/http_utils.py", line 91, in urlopen
    return utils.retry(check_urlopen_retry_factory(retry_on_5 00=retry_on_500), count=retry_count)(urlopen_base)(url, *args, **kwargs)
    File "/usr/libexec/kcare/python/kcarectl/utils.py", line 115, in inner
    return fn(*args, **kwargs)
    File "/usr/libexec/kcare/python/kcarectl/http_utils.py", line 48, in urlopen_base
    return std_urlopen(url, *args, **kwargs) # nosec B310
    File "/usr/lib64/python3.6/urllib/request.py", line 223, in urlopen
    return opener.open(url, data, timeout)
    File "/usr/lib64/python3.6/urllib/request.py", line 526, in open
    response = self._open(req, data)
    File "/usr/lib64/python3.6/urllib/request.py", line 544, in _open
    '_open', req)
    File "/usr/lib64/python3.6/urllib/request.py", line 504, in _call_chain
    result = func(*args)
    File "/usr/lib64/python3.6/urllib/request.py", line 1392, in https_open
    context=self._context, check_hostname=self._check_hostname)
    File "/usr/lib64/python3.6/urllib/request.py", line 1349, in do_open
    encode_chunked=req.has_header('Transfer-encoding'))
    File "/usr/lib64/python3.6/http/client.py", line 1273, in request
    self._send_request(method, url, body, headers, encode_chunked)
    File "/usr/lib64/python3.6/http/client.py", line 1319, in _send_request
    self.endheaders(body, encode_chunked=encode_chunked)
    File "/usr/lib64/python3.6/http/client.py", line 1268, in endheaders
    self._send_output(message_body, encode_chunked=encode_chunked)
    File "/usr/lib64/python3.6/http/client.py", line 1044, in _send_output
    self.send(msg)
    File "/usr/lib64/python3.6/http/client.py", line 982, in send
    self.connect()
    File "/usr/lib64/python3.6/http/client.py", line 1441, in connect
    server_hostname=server_hostname)
    File "/usr/lib64/python3.6/ssl.py", line 365, in wrap_socket
    _context=self, _session=session)
    File "/usr/lib64/python3.6/ssl.py", line 810, in __init__
    self.do_handshake()
    File "/usr/lib64/python3.6/ssl.py", line 1070, in do_handshake
    self._sslobj.do_handshake()
    File "/usr/lib64/python3.6/ssl.py", line 653, in do_handshake
    match_hostname(self.getpeercert(), self.server_hostname)
    File "/usr/lib64/python3.6/ssl.py", line 287, in match_hostname
    % (hostname, ', '.join(map(repr, dnsnames))))
    ssl.CertificateError: hostname 'ipv6.cln.cloudlinux.com' doesn't match either of 'cln.cloudlinux.com', 'www.cln.cloudlinux.com'
    Traceback (most recent call last):
    File "/usr/libexec/kcare/python/kcarectl/__main__.py", line 18, in <module>
    self._sslobj.do_handshake()
    File "/usr/lib64/python3.6/ssl.py", line 653, in do_handshake
    match_hostname(self.getpeercert(), self.server_hostname)
    File "/usr/lib64/python3.6/ssl.py", line 287, in match_hostname
    % (hostname, ', '.join(map(repr, dnsnames))))
    ssl.CertificateError: hostname 'ipv6.cln.cloudlinux.com' doesn't match either of 'cln.cloudlinux.com', 'www.cln.cloudlinux.com'

    During handling of the above exception, another exception occurred:

    Traceback (most recent call last):
    File "/usr/lib64/python3.6/runpy.py", line 193, in _run_module_as_main
    "__main__", mod_spec)
    File "/usr/lib64/python3.6/runpy.py", line 85, in _run_code
    exec(code, run_globals)
    File "/usr/libexec/kcare/python/kcarectl/__main__.py", line 29, in <module>
    send_exc()
    File "/usr/libexec/kcare/python/kcarectl/__init__.py", line 141, in send_exc
    url = utils.get_patch_server_url('/api/kcarectl-trace') + '?trace=' + encoded_trace
    File "/usr/libexec/kcare/python/kcarectl/utils.py", line 194, in get_patch_server_url
    return '/'.join(it.strip('/') for it in filter(None, (ipv6_support.get_patch_server(),) + parts))
    File "/usr/libexec/kcare/python/kcarectl/ipv6_support.py", line 130, in get_patch_server
    return config.PATCH_SERVER_IPV6 if ip_proto_selector.is_ipv6_preferred() else config.PATCH_SERVER
    File "/usr/libexec/kcare/python/kcarectl/ipv6_support.py", line 72, in is_ipv6_preferred
    ipv6_license = self._get_cln_license(ipv6=True)
    File "/usr/libexec/kcare/python/kcarectl/ipv6_support.py", line 113, in _get_cln_license
    content = utils.nstr(http_utils.urlopen(url, retry_on_500=False).read()) # type: ignore[no-untyped-call]
    File "/usr/libexec/kcare/python/kcarectl/http_utils.py", line 91, in urlopen
    return utils.retry(check_urlopen_retry_factory(retry_on_5 00=retry_on_500), count=retry_count)(urlopen_base)(url, *args, **kwargs)
    File "/usr/libexec/kcare/python/kcarectl/utils.py", line 115, in inner
    return fn(*args, **kwargs)
    File "/usr/libexec/kcare/python/kcarectl/http_utils.py", line 48, in urlopen_base
    return std_urlopen(url, *args, **kwargs) # nosec B310
    File "/usr/lib64/python3.6/urllib/request.py", line 223, in urlopen
    return opener.open(url, data, timeout)
    File "/usr/lib64/python3.6/urllib/request.py", line 526, in open
    response = self._open(req, data)
    File "/usr/lib64/python3.6/urllib/request.py", line 544, in _open
    '_open', req)
    File "/usr/lib64/python3.6/urllib/request.py", line 504, in _call_chain
    result = func(*args)
    File "/usr/lib64/python3.6/urllib/request.py", line 1392, in https_open
    context=self._context, check_hostname=self._check_hostname)
    File "/usr/lib64/python3.6/urllib/request.py", line 1349, in do_open
    encode_chunked=req.has_header('Transfer-encoding'))
    File "/usr/lib64/python3.6/http/client.py", line 1273, in request
    self._send_request(method, url, body, headers, encode_chunked)
    File "/usr/lib64/python3.6/http/client.py", line 1319, in _send_request
    self.endheaders(body, encode_chunked=encode_chunked)
    File "/usr/lib64/python3.6/http/client.py", line 1268, in endheaders
    self._send_output(message_body, encode_chunked=encode_chunked)
    File "/usr/lib64/python3.6/http/client.py", line 1044, in _send_output
    self.send(msg)
    File "/usr/lib64/python3.6/http/client.py", line 982, in send
    self.connect()
    File "/usr/lib64/python3.6/http/client.py", line 1441, in connect
    server_hostname=server_hostname)
    File "/usr/lib64/python3.6/ssl.py", line 365, in wrap_socket
    _context=self, _session=session)
    File "/usr/lib64/python3.6/ssl.py", line 810, in __init__
    self.do_handshake()
    File "/usr/lib64/python3.6/ssl.py", line 1070, in do_handshake
    self._sslobj.do_handshake()
    File "/usr/lib64/python3.6/ssl.py", line 653, in do_handshake
    match_hostname(self.getpeercert(), self.server_hostname)
    File "/usr/lib64/python3.6/ssl.py", line 287, in match_hostname
    % (hostname, ', '.join(map(repr, dnsnames))))
    ssl.CertificateError: hostname 'ipv6.cln.cloudlinux.com' doesn't match either of 'cln.cloudlinux.com', 'www.cln.cloudlinux.com'
    [root@server ~]#
    Tags: None
    • bogdan.sh
      Administrator
      • Nov 2016
      • 1239
      #2
      Hello! And welcome to the forum.

      Please provide the output of:

      HTML Code:
      host ipv6.cln.cloudlinux.com
host cln.cloudlinux.com
ping ipv6.cln.cloudlinux.com

        Comment

        • jiroun
          Junior Member
          • Aug 2025
          • 2
          #3
          [root@server ~]# host ipv6.cln.cloudlinux.com
          ipv6.cln.cloudlinux.com has IPv6 address 2604:4500:6:203f::b
          [root@server ~]# host cln.cloudlinux.com
          cln.cloudlinux.com has address 23.111.175.220
          [root@server ~]# ping ipv6.cln.cloudlinux.com
          PING ipv6.cln.cloudlinux.com(2604:4500:6:203f::b (2604:4500:6:203f::b)) 56 data bytes
          64 bytes from 2604:4500:6:203f::b (2604:4500:6:203f::b): icmp_seq=1 ttl=49 time=146 ms
          64 bytes from 2604:4500:6:203f::b (2604:4500:6:203f::b): icmp_seq=2 ttl=49 time=142 ms
          64 bytes from 2604:4500:6:203f::b (2604:4500:6:203f::b): icmp_seq=3 ttl=49 time=142 ms
          64 bytes from 2604:4500:6:203f::b (2604:4500:6:203f::b): icmp_seq=4 ttl=49 time=142 ms
          64 bytes from 2604:4500:6:203f::b (2604:4500:6:203f::b): icmp_seq=5 ttl=49 time=142 ms
          64 bytes from 2604:4500:6:203f::b (2604:4500:6:203f::b): icmp_seq=6 ttl=49 time=142 ms
          64 bytes from 2604:4500:6:203f::b (2604:4500:6:203f::b): icmp_seq=7 ttl=49 time=141 ms
          64 bytes from 2604:4500:6:203f::b (2604:4500:6:203f::b): icmp_seq=8 ttl=49 time=142 ms
          64 bytes from 2604:4500:6:203f::b (2604:4500:6:203f::b): icmp_seq=9 ttl=49 time=142 ms
          64 bytes from 2604:4500:6:203f::b (2604:4500:6:203f::b): icmp_seq=10 ttl=49 time=143 ms
          64 bytes from 2604:4500:6:203f::b (2604:4500:6:203f::b): icmp_seq=11 ttl=49 time=143 ms
          64 bytes from 2604:4500:6:203f::b (2604:4500:6:203f::b): icmp_seq=12 ttl=49 time=141 ms
          64 bytes from 2604:4500:6:203f::b (2604:4500:6:203f::b): icmp_seq=13 ttl=49 time=142 ms
          64 bytes from 2604:4500:6:203f::b (2604:4500:6:203f::b): icmp_seq=14 ttl=49 time=142 ms
          ^C
          --- ipv6.cln.cloudlinux.com ping statistics ---
          14 packets transmitted, 14 received, 0% packet loss, time 13019ms
          rtt min/avg/max/mdev = 141.327/141.983/145.818/1.209 ms
          [root@server ~]#



          Thanks for your help

            Comment

            • bogdan.sh
              Administrator
              • Nov 2016
              • 1239
              #4
              Hello,

              Thanks for reporting this, it seems to be the issue on our side. Our CLN team has been informed and I will update this thread as soon as fixed.

                Comment

                • bogdan.sh
                  Administrator
                  • Nov 2016
                  • 1239
                  #5
                  This should be fixed now from our end. Could you please try again?

                    Comment

                    Previous template Next
                    Working...
                    X

                    We process personal data about users of our site, through the use of cookies and other technologies, to deliver our services, personalize advertising, and to analyze site activity. We may share certain information about our users with our advertising and analytics partners. For additional details, refer to our Privacy Policy.

                    By clicking "I AGREE" below, you agree to our Privacy Policy and our personal data processing and cookie practices as described therein. You also acknowledge that this forum may be hosted outside your country and you consent to the collection, storage, and processing of your data in the country where this forum is hosted.

                    I Agree