Ceph x509 cannot validate certificate

[sipvoip]

Trying to get Ceph Zabbix2 Agent working, I have tried both localhost and 127.0.0.1 but it does not like my self signed cert.

• Cannot fetch data: Post "https://zabbix:***@127.0.0.1:8003/request?wait=1": x509: cannot validate certificate for 127.0.0.1 because it doesn't contain any IP SANs.
• Cannot fetch data: Post "https://zabbix:***@localhost:8003/request?wait=1": x509: certificate is not valid for any names, but wanted to match localhost.

[jeeva]

Having the same issue, were you able to resolve it ?

[sipvoip]

Yes, still an issue.

[Justin417]

I was able to resolve this issue after locating this document: https://git.zabbix.com/projects/ZBX/...Frelease%2F5.4

Since the CEPH plugin generates self-signed certificates by default, the SSL verification was failing. I had to add the following to my zabbix_agent2.conf file:

Plugins.Ceph.InsecureSkipVerify=true

Then I had to restart zabbix-agent2. Now I was able to query data from the CEPH API successfully.