tracker issue : CF-4206375

select a category, or use search below
(searches all categories and all time range)
Title:

SSL Peer Unverified Exception with Wildcard Certificate

| View in Tracker

Status/Resolution/Reason: To Fix//BugVerified

Reporter/Name(from Bugbase): Timothy S. / ()

Created: 12/13/2019

Components: Web Services

Versions: 2018

Failure Type:

Found In Build/Fixed In Build: 2018.0.06.316308 /

Priority/Frequency: Normal /

Locale/System: / Win 2012 Server x64

Vote Count: 0

Problem Description:  We recently updated our development servers to CF 2018 Hotfix 6 (hotfix-006-316308) and we are now getting the following SSL Certificate Issue: javax.net.ssl.SSLPeerUnverifiedException: Certificate for <hostname> doesn't match any of the subject alternative names: []

Through extensive research I have determined this is likely due so self-signed wildcard certificates and domain name verification.  See related article -http://httpcomponents.10934.n7.nabble.com/jira-Commented-HTTPCLIENT-1997-SSLPeerUnverifiedException-on-matching-wildcard-certificate-td36407.html

Our environment is Windows Server 2012 x64, IIS 8.5

Steps to Reproduce:  install hotfix 6 in an environment with wildcard certificates without SAN's defined

Expected Result:  no errors

Any Workarounds:  manually update the httpClient library to version 4.5.10 to correct the {DefaultHostNameVerifier} issue

Attachments:

Comments: