tls: failed to verify certificate: x509

[rudyelaytonsera]

Hello all, i just found out about this solution and im trying to install it. Im trying to enroll new resources by copying the command into the agent and it shows as connected and should be able to be seen in the Teleport web UI or 'tsh ls' with the name 'sera27016', however nothing is shown in the Teleport web UI master or the 'tsh ls' .

This is the master teleport.yaml

version: v3
teleport:
  nodename: sera27018
  data_dir: /var/lib/teleport
  log:
    output: stderr
    severity: INFO
    format:
      output: text
  ca_pin: ""
  diag_addr: ""
auth_service:
  enabled: "yes"
  listen_addr: 0.0.0.0:3025
  proxy_listener_mode: multiplex
ssh_service:
  enabled: "yes"
proxy_service:
  enabled: "yes"
  https_keypairs: []
  https_keypairs_reload_interval: 0s
  acme: {}
  public_addr: 10.200.10.128

This is the agent teleport.yaml

version: v3
teleport:
  nodename: sera27016
  data_dir: /var/lib/teleport
  join_params:
    token_name: 52a0a8fa712ebb812996b801787cbf4c
    method: token
  proxy_server: 10.200.10.128:3080
  log:
    output: stderr
    severity: INFO
    format:
      output: text
  ca_pin: sha256:5195f86ca9e3e7d5f52675dabf45d1afc3696f46c437de6b7cc5df99112c85d9
  diag_addr: ""
auth_service:
  enabled: "no"
ssh_service:
  enabled: "yes"
  labels:
    teleport.internal/resource-id: 39427658-6441-4e40-84e9-27d81505929c
proxy_service:
  enabled: "no"
  https_keypairs: []
  https_keypairs_reload_interval: 0s
  acme: {}

After running sudo journalctl -u teleport.service | grep "fail", i found out that theres this issue

Oct 30 10:37:17 sera27016 teleport[7110]: Original Error: trace.aggregate Post "https://10.200.10.128:3080/v1/webapi/host/credentials": tls: failed to verify certificate: x509: certificate is valid for 127.0.0.1, ::1, not 10.200.10.128
Oct 30 10:37:17 sera27016 teleport[7110]:         Post "https://10.200.10.128:3080/v1/webapi/host/credentials": tls: failed to verify certificate: x509: certificate is valid for 127.0.0.1, ::1, not 10.200.10.128] service/connect.go:100
Oct 30 10:37:57 sera27016 teleport[7110]: Original Error: trace.aggregate Post "https://10.200.10.128:3080/v1/webapi/host/credentials": tls: failed to verify certificate: x509: certificate is valid for 127.0.0.1, ::1, not 10.200.10.128
Oct 30 10:37:57 sera27016 teleport[7110]:         Post "https://10.200.10.128:3080/v1/webapi/host/credentials": tls: failed to verify certificate: x509: certificate is valid for 127.0.0.1, ::1, not 10.200.10.128] service/connect.go:100

Can someone give me a hint or help me solve this issue since i still cant find the solution or the workaround?

[saliou44]

hello u need a proxy and a certificate provider like letsencryp....