{"action":"created","issue":{"url":"https://api.github.com/repos/docker/swarm/issues/341","labels_url":"https://api.github.com/repos/docker/swarm/issues/341/labels{/name}","comments_url":"https://api.github.com/repos/docker/swarm/issues/341/comments","events_url":"https://api.github.com/repos/docker/swarm/issues/341/events","html_url":"https://github.com/docker/swarm/issues/341","id":56118468,"number":341,"title":"Swarm with tls","user":{"login":"david-guenault","id":174099,"avatar_url":"https://avatars.githubusercontent.com/u/174099?v=3","gravatar_id":"","url":"https://api.github.com/users/david-guenault","html_url":"https://github.com/david-guenault","followers_url":"https://api.github.com/users/david-guenault/followers","following_url":"https://api.github.com/users/david-guenault/following{/other_user}","gists_url":"https://api.github.com/users/david-guenault/gists{/gist_id}","starred_url":"https://api.github.com/users/david-guenault/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/david-guenault/subscriptions","organizations_url":"https://api.github.com/users/david-guenault/orgs","repos_url":"https://api.github.com/users/david-guenault/repos","events_url":"https://api.github.com/users/david-guenault/events{/privacy}","received_events_url":"https://api.github.com/users/david-guenault/received_events","type":"User","site_admin":false},"labels":[],"state":"closed","locked":false,"assignee":null,"milestone":null,"comments":30,"created_at":"2015-01-31T08:51:10Z","updated_at":"2015-02-19T01:04:14Z","closed_at":"2015-02-02T22:36:45Z","body":"May be i'm doing things wrong but here is my problem\r\n\r\nI have built 3 docker nodes with tls client auth. I can remotly access each node. Now i want to manage the nodes trough swarm (with tls). Here is my problem\r\n\r\nsay i'm on node3 and i remotely execute docker command on node1 it work fine \r\n\r\n```\r\ndocker -H node1:2375 version\r\nClient version: 1.4.1\r\nClient API version: 1.16\r\nGo version (client): go1.3.3\r\nGit commit (client): 5bc2ff8\r\nOS/Arch (client): linux/amd64\r\nServer version: 1.4.1\r\nServer API version: 1.16\r\nGo version (server): go1.3.3\r\nGit commit (server): 5bc2ff8\r\n```\r\n\r\nBut when i want to use swarm everything goes wrong for me\r\n\r\n```\r\n./swarm manage --tlsverify --tlscacert tlscerts/ca.pem --tlscert tlscerts/cert.pem --tlskey tlscerts/key.pem --discovery file://cluster -H 0.0.0.0:2376\r\nINFO[0000] Listening for HTTP on tcp (0.0.0.0:2376)     \r\nERRO[0000] Get https://10.10.0.22:2375/v1.15/info: x509: cannot validate certificate for 10.10.0.22 because it doesn't contain any IP SANs \r\nERRO[0000] Get https://10.10.0.5:2375/v1.15/info: x509: cannot validate certificate for 10.10.0.5 because it doesn't contain any IP SANs \r\nERRO[0000] Get https://10.20.0.21:2375/v1.15/info: x509: cannot validate certificate for 10.20.0.21 because it doesn't contain any IP SANs \r\n```\r\n\r\nthe discovery file is :\r\n\r\n```\r\nnode1:2375\r\nnode2:2375\r\nnode3:2375\r\n```\r\n\r\nNote that swarm certificates are generated with extendedKeyUsage = clientAuth,serverAuth according to the documentation with the same CA as for the docker servers and clients certificates.\r\n"},"comment":{"url":"https://api.github.com/repos/docker/swarm/issues/comments/74982049","html_url":"https://github.com/docker/swarm/issues/341#issuecomment-74982049","issue_url":"https://api.github.com/repos/docker/swarm/issues/341","id":74982049,"user":{"login":"SvenDowideit","id":28492,"avatar_url":"https://avatars.githubusercontent.com/u/28492?v=3","gravatar_id":"","url":"https://api.github.com/users/SvenDowideit","html_url":"https://github.com/SvenDowideit","followers_url":"https://api.github.com/users/SvenDowideit/followers","following_url":"https://api.github.com/users/SvenDowideit/following{/other_user}","gists_url":"https://api.github.com/users/SvenDowideit/gists{/gist_id}","starred_url":"https://api.github.com/users/SvenDowideit/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/SvenDowideit/subscriptions","organizations_url":"https://api.github.com/users/SvenDowideit/orgs","repos_url":"https://api.github.com/users/SvenDowideit/repos","events_url":"https://api.github.com/users/SvenDowideit/events{/privacy}","received_events_url":"https://api.github.com/users/SvenDowideit/received_events","type":"User","site_admin":false},"created_at":"2015-02-19T01:04:14Z","updated_at":"2015-02-19T01:04:14Z","body":"this is also what https://github.com/SvenDowideit/generate_cert was created to do - its go, so we could just import the code..."}}