2

I am creating a consumer using soladmin. consumer is an ssl consumer and the operational state is down. I am getting an error saying "local ssl Handshake failed : Server certificate verification failed : not trusted common name"

any have any ide in what situations I get this error.

Dhanarupa Gutti
  • 33
  • 2

1 Answers1

1

The error indicates that the Solace appliance/VMR is not able to verify the common name of the server certificate of the REST consumer.

You can get rid of the error by either:

  1. Adding the common name of the REST consumer's SSL certficate as a trusted common name for this specific REST consumer.

    a) Right click the REST consumer in SolAdmin.

    b) Left Click "Manage SSL Options" Manage SSL Options

    c) Add the correct trusted common name. Add Trusted Common Name

  2. Disable "Enforce Trusted Common Name" on the VPN.

    a) Login via the CLI

    b) Enter the following series of commands, replacing myVPN with the actual name of your VPN.

    solace> enable
solace# configure
solace(configure)# message-vpn myVPN
solace(configure/message-vpn)# rest
solace(configure/message-vpn/rest)# ssl server-certificate-validation
solace(...est/ssl/server-certificate-validation)# no enforce-trusted-common-name

    c) Verify that "Enforce Trusted Common Name" is now disabled. Once again, replace myVPN with the actual name of your VPN.

    solace> show message-vpn myVPN rest
Message VPN:                         myVPN
REST SSL Server Certificate Validation
      Enforce Trusted Common Name:   Disabled
      Maximum Chain Depth:           3
      Validate Certificate Dates:    Enabled
Russell Sim
  • 1,693
  • 2
  • 14
  • 22