本文memo一下HTTPS方式下ETCD证书生成时的一个小错误。
现象：提示bad certificate错误
证书正常生成与设定，etcd能够正常启动，但是客户端连接2379端口时报错，报错示例：
Mar 23 10:58:32 host131 etcd[7421]: rejected connection from "192.168.163.131:50958" (error "remote error: tls: bad certificate", ServerName "")
原因
证书设定问题，需检查证书生成时csr文件中是否正确设定，IP是否设定到hosts中
对应方法
设定正确之后重新生成证书并部署，连接即可成功
[root@host131 shell]# export ETCDCTL_API=3; etcdctl --endpoints=https://192.168.163.131:2379 --cacert=/etc/ssl/ca/ --cert=/etc/ssl/etcd/ --key=/etc/ssl/etcd/ endpoint health
https://192.168.163.131:2379 is healthy: successfully committed proposal: took = 1.528611ms
[root@host131 shell]#