Diagnostic code

ZC-E0814

the TLS client certificate was not asked for, or was refused

Kind

error

Blame

external

Exit code

3

What it means

The client was told to present a certificate and the server did not ask for one, or the server refused the one presented (the alert names why: bad_certificate, certificate_expired, unknown_ca, certificate_required), or the request cannot be answered (it does not list Ed25519), or the signer holding the key failed. The connection is closed; a refusal arrives after the client's own handshake is done, so data written before the alert was read was not accepted.

A server that never asks cannot learn which workload is calling, so a connection that must prove identity stops. Check that the server is configured to require client certificates and trusts the cluster CA; a refused certificate is expired, issued by another CA, or for a different workload than the server allows.

Offline

The same text, without a network:

zcube explain E0814