Forum archive › Minio

mc: Unable to initialize new alias from the provided credentials. Get : x509: “*.k8s.imperva.local” certificate is not standards compliant.

Read-only archive. These discussions are from Tracston's earlier technical forum and are kept online because the answers are still useful. New replies are closed. Need help with something like this? Talk to us.

Question 30 Apr 2023

Problem

User tries to run a mc command to download file from the minio server and gets the following error

mc: <ERROR> Unable to initialize new alias from the provided credentials. Get "https://minio.k8s.tracston.com": x509: “*.k8s.imperva.local” certificate is not standards compliant.

Solution

Seems like this issue is related to mc utility compiled for MAC. Apple enforces SCT requirements on all publicly trusted certificates as part of its base TLS policy. Apple's policy requires at least two Signed Certificate Timestamps (SCT) issued from a CT log — once-approved¹ or currently approved² at the time of check — and either: At least two SCTs from currently approved CT logs with one SCT presented via TLS extension or OCSP Stapling.

Get the latest mc binaries

Need this fixed properly?

We do this for a living.

Kubernetes, DevOps and platform engineering, delivered in days — not another weekend lost to a stack trace.

Start a project →