Failed to register template: with error: Received fatal alert: unrecognized_name

[PPisz]

Hello,

Unfortunately I can't register a new template in CS, I get the message below.
What could be the reason? CloudStack 4.20

2025-03-04 13:21:25,453 DEBUG [c.c.a.t.Request] (AgentManager-Handler-3:[]) (logid:) Seq 6-4930597167040561175: Processing: { Ans: , MgmtId: 222320990092816, via: 6, Ver: v1, Flags: 10, [{"com.cloud.agent.api.storage.DownloadAnswer":{"jobId":"11b03232-ef57-4a56-9605-24d412cd1f04","downloadPct":"0","errorString":"Received fatal alert: unrecognized_name","downloadStatus":"DOWNLOAD_ERROR","downloadPath":"/mnt/SecStorage/9bf7d36f-f049-3f71-89a8-101bacf6be00/template/tmpl/107/356/dnld13432419531709101329tmp_","installPath":"template/tmpl/107/356","templateSize":"(0 bytes) 0","templatePhySicalSize":"(0 bytes) 0","result":"true","details":"Received fatal alert: unrecognized_name","wait":"0","bypassHostMaintenance":"false"}}] } 2025-03-04 13:21:25,475 WARN [c.c.a.AlertManagerImpl] (RemoteHostEndPoint-9:[ctx-34fc0a1a]) (logid:4ed6d77b) alertType=[28] dataCenterId=[1] podId=[null] clusterId=[null] message=[Failed to register template: a2539966-5396-4396-99fb-a3cb7a752999 with error: Received fatal alert: unrecognized_name]. 2025-03-04 13:21:25,481 ERROR [o.a.c.s.i.BaseImageStoreDriverImpl] (RemoteHostEndPoint-9:[ctx-34fc0a1a]) (logid:4ed6d77b) Failed to register template: a2539966-5396-4396-99fb-a3cb7a752999 with error: Received fatal alert: unrecognized_name

[DaanHoogland]

@PPisz , this is not a message from the ACS code but from the bouncy castle library. I think it means the name on the certificate does not match the actual name. (not sure)
Can you try downloading for instance with wget?

[weizhouapache]

@PPisz
You faced the issue #9962 before, which has been fixed by #10028

I think #10028 is not included in 4.20.0.0. Can you manually make the changes and retry ?

[PPisz]

I confirm that after manual change everything works correctly.

[PPisz]

Everything is fine with the certificate, I think it is the same:

#9962

After upgrade to 4.20 enableSNIExtension=false back.
The template is registered via http, I will check the SNIE changes right away.