Hi folks, I just installed Harvester bare metal on one of my homelab machines for evaluation and I'm really excited at the possibilities! It is a clean install and I'm having an issue pulling images from a URL. Since it is a clean install at the latest version, I'm not sure if it is an issue with my configuration or a bug. Wanted to do a sanity check here before filing a bug. When I go to download an image, I get the error

Head "<https://github.com/rancher/k3os/releases/download/v0.20.6-k3s1r0/k3os-amd64.iso>": x509: certificate is not valid for any names, but wanted to match <http://github.com|github.com>

This happens for different domains and images as well. If I try with just the http protocol, I get

Got 404 status code from <http://github.com/rancher/k3os/releases/download/v0.20.6-k3s1r0/k3os-amd64.iso>

. No VMs are running. I have the default management network and a VM network (both are reporting as active). It is connected to my home LAN with nothing fancy like proxies going on. In advanced settings, I don't have anything set for

additional-ca

,

http-proxy

,

ssl-certificates

,

ssl-parameters

, or

vip-pools

. I'm not really sure how to debug this further. Is this a bug that I should file or is there an issue with my configuration?

Sure! We can look at the support bundle to see what happened. Feel free to attach it here. Thank you.

supportbundle_1b7cc225-3490-415f-9da6-2dd2652c47fa_2023-04-06T23-22-48Z.zip

I’ve checked the support bundle file. It seems similar errors happen not only with your image, but there are also lots of certificate errors in the logs for harvester system components:

logs/cattle-system/rancher-68799df576-6kgtk/rancher.log:2023-04-06T23:22:39.960195043Z 2023/04/06 23:22:39 [ERROR] error syncing 'rancher-stable': handler helm-clusterrepo-download: Get "<https://releases.rancher.com/server-charts/stable/index.yaml>": x509: certificate is not valid for any names, but wanted to match <http://releases.rancher.com|releases.rancher.com>, requeuing
logs/harvester-system/harvester-5b6b4994-qq5jf/apiserver.log:2023-04-06T21:05:28.733608477Z time="2023-04-06T21:05:28Z" level=error msg="failed syncing version metadata: Post \"<https://harvester-upgrade-responder.rancher.io/v1/checkupgrade>\": x509: certificate is not valid for any names, but wanted to match <http://harvester-upgrade-responder.rancher.io|harvester-upgrade-responder.rancher.io>"
logs/longhorn-system/longhorn-manager-qfv6g/longhorn-manager.log:2023-04-06T21:05:38.593416886Z time="2023-04-06T21:05:38Z" level=debug msg="Failed to check for the latest and stable Longhorn versions" controller=longhorn-setting error="Post \"<https://longhorn-upgrade-responder.rancher.io/v1/checkupgrade>\": x509: certificate is not valid for any names, but wanted to match <http://longhorn-upgrade-responder.rancher.io|longhorn-upgrade-responder.rancher.io>" node=boogle