After configuring multi cn, tidb shows down

[lhy1024]

Bug Report

Please answer these questions before submitting your issue. Thanks!

1. Minimal reproduce step (Required)

tiup cluster tls test enable

edit config and add cluster-verify-cn

tidb_servers:
- host: 192.168.8.88
  ssh_port: 22
  port: 4000
  status_port: 10080
  deploy_dir: /tidb-deploy/tidb-4000
  log_dir: /tidb-deploy/tidb-4000/log
  config:
    security.cluster-ssl-ca: /tidb-deploy/tidb-4000/tls/ca.crt
    security.cluster-ssl-cert: /tidb-deploy/tidb-4000/tls/tidb.crt
    security.cluster-ssl-key: /tidb-deploy/tidb-4000/tls/tidb.pem
    security.cluster-verify-cn:
      - tidb
      - tikv
      - pd
  arch: amd64
  os: linux
tikv_servers:
- host: 192.168.8.88
  ssh_port: 22
  port: 20160
  status_port: 20180
  deploy_dir: /data1/tidb-deploy/tikv-20160
  data_dir: /data1/tidb-data/tikv-20160
  log_dir: /data1/tidb-deploy/tikv-20160/log
  config:
    security.ca-path: /data1/tidb-deploy/tikv-20160/tls/ca.crt
    security.cert-allowed-cn:
      - tidb
      - tikv
      - pd
    security.cert-path: /data1/tidb-deploy/tikv-20160/tls/tikv.crt
    security.key-path: /data1/tidb-deploy/tikv-20160/tls/tikv.pem
  arch: amd64
  os: linux
tiflash_servers: []
pd_servers:
- host: 192.168.8.88
  ssh_port: 22
  patched: true
  name: pd-192.168.8.88-2379
  client_port: 2379
  peer_port: 2380
  deploy_dir: /tidb-deploy/pd-2379
  data_dir: /tidb-data/pd-2379
  log_dir: /tidb-deploy/pd-2379/log
  config:
    security.cacert-path: /tidb-deploy/pd-2379/tls/ca.crt
    security.cert-path: /tidb-deploy/pd-2379/tls/pd.crt
    security.cluster-verify-cn:
      - tidb
      - tikv
      - pd
    security.key-path: /tidb-deploy/pd-2379/tls/pd.pem
  arch: amd64
  os: linux

2. What did you expect to see? (Required)

work normal

3. What did you see instead (Required)

4. What is your TiDB version? (Required)

[lhy1024]

pd use tikv/pd#8518

[lhy1024]

tikv/pd#8518 (comment)

The result of sysbench is normal, tidb status display exceptions are another issue

[lhy1024]

I found https://github.com/pingcap/tiup/blob/a16d04fccb22106a5c8b2d7d074b7ab94a1dd677/pkg/cluster/manager/cacert.go#L65, so add test-client