Question:
I am trying to install a collector using the Setup wizard. The wizard generates the wget command download and installs the collector, but the site's certificate cn does not match the requested hostname:
Command generated by wizard:
wget https://collectors.us2.sumologic.com/rest/download/linux/64 -O SumoCollector.sh && chmod +x SumoCollector.sh && ./SumoCollector.sh -q -Vsumo.token_and_url=randomtokengenerated=
Response:
Resolving collectors.us2.sumologic.com... 54.245.121.189, 54.214.44.252, 54.245.251.27, ...
Connecting to collectors.us2.sumologic.com|54.245.121.189|:443... connected.
ERROR: certificate common name “service.us2.sumologic.com” doesn’t match requested host name “collectors.us2.sumologic.com”.
To connect to collectors.us2.sumologic.com insecurely, use ‘--no-check-certificate’.
Why am I receiving this error for the certificate mismatch?
Answer:
There is a known issue with some older versions of WGET where that function does not correctly check the Server Alternate Name (SAN) property in an SSL certificate, resulting in the message your seeing. More information can be found in the following bug report.
https://bugzilla.redhat.com/show_bug.cgi?id=903756
It is recommended to upgrade wget to a more recent version in order to resolve this issue. A less secure option is to use the --no-check-certificate flag when using wget to download.
Comments
0 comments
Please sign in to leave a comment.