Unable to register pmm-client with pmm-server

,
1

Hello everyone,

I have been able to successfully register my client to server using
pmm-admin config --server-insecure-tls --server-url=https://admin:admin@X.X.X.X:443

But as I was reading the doc , I was exploring different ways in which I can make an ssl connection between pmm-client and pmm-server,
so i found this particular command : pmm-admin config --server-url=https://admin:admin@10.57.58.215
But I am getting the following error,
Failed to register pmm-agent on PMM Server: Post “https://10.57.58.215:443/v1/management/Node/Register”: x509: cannot validate certificate for 10.57.58.215 because it doesn’t contain any IP SANs.

I want to establish an ssl connection between my client and server , how can do that?

1 Like
2

The default SSL certificate is self-signed which requires you to use the --server-insecure-tls flag. You can use your own SSL certificates, signed by a 3rd party (LetsEncrypt for example) which does not need the insecure flag. Check Database Performance Blog – Percona for a HOWTO on this.

1 Like
3

Thanks for the information.
So if I use --server-insecure-tls for connecting my pmm-client with pmm-server it means that I am using the default ssl certs present in /srv/nginx inside my docker right ?
Either ways (using default certificate or generating my own) the connection between pmm-client and pmm-server will be ssl , is my understanding correct ?

1 Like
4

Yes, that is correct.

1 Like
5

okay, thank you @matthewb

1 Like