Unable to Register CA

[aliiraza4064]

What happened?

Error: POST failure of request: POST https://10.6.0.4:30972/enroll
{"hosts":null,"certificate_request":"-----BEGIN CERTIFICATE REQUEST-----\nMIHvMIGWAgEAMBExDzANBgNVBAMTBmVucm9sbDBZMBMGByqGSM49AgEGCCqGSM49\nAwEHA0IABC+4JlU1k6iTZt7GlaZ/3sLz9zFqHm8Oyi9NnHNzwStd1aMk3iKCxPow\nHKFjpoWW3kOQgOlCG60rz6Ik7RXAXaugIzAhBgkqhkiG9w0BCQ4xFDASMBAGA1Ud\nEQQJMAeCBW5vZGUxMAoGCCqGSM49BAMCA0gAMEUCIQDRb7U1PtMesr3hNfsDiA8W\niI8LSHI0oZfxe3nuVxdSWgIgWzcGNWAJ/uHyxWZtO/tzyU/5xD1df6d6rut/BaHc\nW+c=\n-----END CERTIFICATE REQUEST-----\n","profile":"","crl_override":"","label":"","NotBefore":"0001-01-01T00:00:00Z","NotAfter":"0001-01-01T00:00:00Z","ReturnPrecert":false,"CAName":""}: Post "https://10.6.0.4:30972/enroll": tls: failed to verify certificate: x509: certificate is valid for 127.0.0.1, not 10.6.0.4

What did you expect to happen?

Getting this error while registering CA to peer. When I use 1.8.0 then this error don't happen this is only on 1.9.2.

How can we reproduce it (as minimally and precisely as possible)?

kubectl hlf ca register --name=org1-ca --user=peer --secret=peerpw --type=peer
--enroll-id enroll --enroll-secret=enrollpw --mspid Org1MSP -n hlf

Anything else we need to know?

I was creating cluster with help of this https://youtu.be/CRfmFw3OVgU?si=_tZCXYs-xX7xCrVc by @adityajoshi12 .
I'm doing it without using Istio.

Kubernetes version

``` MicroK8s v1.29.2 revision 6641 ```

[hasanyeganeh]

I have same issue

[hasanyeganeh]

1- Create CA:
kubectl hlf ca create --storage-class=openebs-hostpath --capacity=2Gi --name=org1-ca --enroll-id=enroll --enroll-pw=enrollpw --namespace=fabric

2- Edit config file
kubectl edit fabriccas.hlf.kungfusoftware.es org1-ca -n fabric
replace all "localhost" with "Your Host IP address"
save and let CA to restart

3- register a peer user
kubectl hlf ca register --name=org1-ca --user=peer --secret=peerpw --type=peer --enroll-id enroll --enroll-secret=enrollpw --mspid Org1MSP --namespace=fabric

[xrkolovos]

what do you mean by "Your Host IP address"? The Control Plane Ip? Some node IP? the ip a machine outside of kubernetes that is running kubectl?

[xrkolovos]

We execute kubectl hlf from inside the ControlPlane.
We used CLUSTER_IP=$(kubectl -n istio-system get svc istio-ingressgateway -o json | jq -r .spec.clusterIP) to get the Ip of the istio gateway and we added it in the /etc/hosts file of the ControlPlane.

10.98.153.1 org1-ca.localho.st