cert-manager - No client certificate CA names sent

[qdupuy]

Hello,

I am trying to create a let’s encrypt validated certificate via cert-manager for rabbitmq

However, I am getting the following errors :

No client certificate CA names sent

No client certificate CA names sent
Peer signing digest: SHA256
Peer signature type: RSA-PSS
Server Temp Key: X25519, 253 bits
---

SSL handshake has read 4618 bytes and written 363 bytes
Verification error: unable to get issuer certificate
SSL_ERROR_RX_CERTIFICATE_REQUIRED_ALERT

However, I can see my secret and cert-manager has generated the certificate and is in the “ready” state

I do the same thing on my other environment, I can’t reproduce the error

rabbitmq-certmanager file :

apiVersion: cert-manager.io/v1
kind: Certificate
metadata:
  name: rabbitmq-crt
  namespace: databases
spec:
  secretName: rabbitmq-tls
  commonName: rabbitmq.pre-prod.domain.com
  dnsNames:
    - rabbitmq.pre-prod.domain.com
  issuerRef:
    name: letsencrypt-prod
    # We can reference ClusterIssuers by changing the kind here.
    # The default value is Issuer (i.e. a locally namespaced Issuer)
    kind: ClusterIssuer
    group: cert-manager.io

[jetstack-bot]

Issues go stale after 90d of inactivity.
Mark the issue as fresh with /remove-lifecycle stale.
Stale issues rot after an additional 30d of inactivity and eventually close.
If this issue is safe to close now please do so with /close.
Send feedback to jetstack.
/lifecycle stale

[jetstack-bot]

Stale issues rot after 30d of inactivity.
Mark the issue as fresh with /remove-lifecycle rotten.
Rotten issues close after an additional 30d of inactivity.
If this issue is safe to close now please do so with /close.
Send feedback to jetstack.
/lifecycle rotten
/remove-lifecycle stale

[jetstack-bot]

Rotten issues close after 30d of inactivity.
Reopen the issue with /reopen.
Mark the issue as fresh with /remove-lifecycle rotten.
Send feedback to jetstack.
/close

[jetstack-bot]

@jetstack-bot: Closing this issue.

In response to this:

Rotten issues close after 30d of inactivity.
Reopen the issue with /reopen.
Mark the issue as fresh with /remove-lifecycle rotten.
Send feedback to jetstack.
/close

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.