TLS-Handshake error

[sachusachin622]

Hi

I am using the nats certificates ca.pem server-cert.pem and server-key.pem in this path "nats_client/nats.c-2.3.0/test/certs".
Running the nats-server using this command:
"nats-server -config nats.config --tls --tlscacert=/usr/sbin/ca.pem -tlscert=/usr/sbin/server.pem --tlskey=/usr/sbin/server-key.pem"
Running the nats-client using this command:
"nats-client -s SERVER_IP:4222 -tls -tlscacert /usr/sbin/ca.pem"

On server side am getting TLS Handhake error logs as

[12987] 2021/08/03 14:39:58.994906 [INF] Server is ready
[12987] 2021/08/03 14:39:58.994971 [INF] Cluster name is bnngfVp5iXEJNSlmBBwUoJ
[12987] 2021/08/03 14:39:58.995016 [WRN] Cluster name was dynamically generated, consider setting one
[12987] 2021/08/03 14:39:58.995188 [INF] Listening for route connections on 0.0.0.0:4248
[12987] 2021/08/03 14:40:09.760608 [DBG] 10.12.34.36:47173 - cid:3 - Client connection created
[12987] 2021/08/03 14:40:09.760954 [DBG] 10.12.34.36:47173 - cid:3 - Starting TLS client connection handshake
[12987] 2021/08/03 14:40:09.804615 [ERR] 10.12.34.36:47173 - cid:3 - TLS handshake error: remote error: tls: bad certificate
[12987] 2021/08/03 14:40:09.804741 [DBG] 10.12.34.36:47173 - cid:3 - Client connection closed: TLS Handshake Failure

Please help on this.

Thanks.
Sachin

[ripienaar]

You also need to give a --tlscert and --tlskey I think

[sachusachin622]

It got worked ,
Thanks

[kozlovic]

You are not showing the content of the server configuration, which may help. Also, you don't describe how your nats-client configures the connection, so it is difficult to say.

[sachusachin622]

It got worked ,
Thanks