Hey all, I'm trying to get mTLS to play nice between

buildfarm

and

pants

and bumping into the following error when running pants:

Unavailable: "error trying to connect: invalid peer certificate: NotValidForName"

The only mention I've found is in an older comment suggesting adding SANS names to the certificate. I'm using the script provided in the bazelbuild repo to create the certificates, and also tried adding the alt name in the ca and server certs using

-addext "subjectAltName = DNS:${SERVER_CN}"

without luck. The

SERVER_CN

name is an FQDN, and the

CLIENT_CN

has been left empty. In the pants config I've specified the

remote_ca_certs_path

,

remote_client_certs_path

,

remote_client_key_path

,

remote_instance_name

, and

remote_store_address

. Any pointers would be greatly appreciated. 🙏 Thank you. 🙂