/v3/settings/cacerts does not look like an x509 certificate after upgrade to 2.1.0 from 2.0.8

Hi everyone, I have upgraded from 2.08 to 2.1 using the migration from RKE to Helm/Tiller…

well now, all cattle agents error out with the following error:

/v3/settings/cacerts does not look like an x509 certificate (unable to load certificate 140383018549696:error:0906D06C:PEM routines:PEM_read_bio:no start line:../crypto/pem/pem_lib.c:691:Expecting: ...

Can anyone help ? I am using signed certificates from a recognized CA (Comodo)

Many thanks in advance!

Removing CATTLE_CA_CHECKSUM as per


Seems to solve the issue