Forum Navigation
You need to log in to create posts and topics.
mc: Unable to initialize new alias from the provided credentials. Get : x509: “*.k8s.imperva.local” certificate is not standards compliant.
#1 · 30/04/2023, 10:08 am
Quote from moshe on 30/04/2023, 10:08 amProblem
User tries to run a mc command to download file from the minio server and gets the following error
mc: <ERROR> Unable to initialize new alias from the provided credentials. Get "https://minio.k8s.tracston.com": x509: “*.k8s.imperva.local” certificate is not standards compliant.
Solution
Seems like this issue is related to mc utility compiled for MAC. Apple enforces SCT requirements on all publicly trusted certificates as part of its base TLS policy. Apple's policy requires at least two Signed Certificate Timestamps (SCT) issued from a CT log — once-approved1 or currently approved2 at the time of check — and either: At least two SCTs from currently approved CT logs with one SCT presented via TLS extension or OCSP Stapling.
Get the latest mc binaries
Problem
User tries to run a mc command to download file from the minio server and gets the following error
mc: <ERROR> Unable to initialize new alias from the provided credentials. Get "https://minio.k8s.tracston.com": x509: “*.k8s.imperva.local” certificate is not standards compliant.
Solution
Seems like this issue is related to mc utility compiled for MAC. Apple enforces SCT requirements on all publicly trusted certificates as part of its base TLS policy. Apple's policy requires at least two Signed Certificate Timestamps (SCT) issued from a CT log — once-approved1 or currently approved2 at the time of check — and either: At least two SCTs from currently approved CT logs with one SCT presented via TLS extension or OCSP Stapling.
Get the latest mc binaries