Scenario:

The user encounters an error when running checks on two collectors within the same cluster. Both collectors are facing the same issue and are unable to complete the checks successfully.

Error message:

Output: UNKNOWN: SSL Error raised in Agent Client (CERTIFICATE_VERIFY_FAILED)
Error: [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: IP address mismatch, certificate is not valid for '10.25.2.36'. (_ssl.c:1129)

Cause:

This error occurs because the collector is configured to use its hostname, but the SSL certificate verification process is expecting a certificate that matches the IP address. In SSL/TLS connections, certificates are issued for specific hostnames or IP addresses. When the certificate does not match the IP address used by the client to connect, a certificate verification failure is triggered. In this case, the certificate does not support the IP address 10.25.2.36, which results in the error message [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: IP address mismatch.

Resolution:

You will need to redeploy the collectors with the correct configuration. See the documentation for further instructions. 

If Issue Persists

• Please contact with our Client Services team via the chat service box available in any of our websites or via email to support@itrsgroup.com
  

• Make sure you provide to us:
  • ANY LOG FILE OR DIAGNOSTIC
  • ANY SCREENSHOT