Okhttp3, Hostname cannot be verified in case SSL certificate is issued for IP address

Question

Following exception happens when OkHttp tries to connect to a server using IP address:

javax.net.ssl.SSLPeerUnverifiedException: Hostname 195.168.2.68 not verified:
       certificate: sha256/rxO7r+KJOj2iTLR+MPWF7rNV45BYYQKvhlsb4K6yHXE=
       DN: CN=test sandbox,OU=it,O=abc,L=newyork,ST=western,C=us
       subjectAltNames: []

A server has a self-signed SSL Certificate which was generated for server's IP address.

Base Url is : https://195.168.2.68:8092/Mobile/

Whats going wrong here?

I tried with various Values for CN , I used ip also. now cn values is 'test'. — Sewmi Jans, Jan 10 '17 at 09:42

score 0 · Answer 1 · answered Jan 10 '17 at 09:46

Hostname 195.168.2.68 not verified

and

I tried with various Values for CN , I used ip also. now cn values is 'test'.

Since 195.168.2.68 does not match test it all works as expected as CommonName is what is mainly being used for matching, so you need either properly issued certificate or you may i.e. delegate test domain to point to 195.168.2.68 and use test instead of IP to make it match CN. But I'd fix the certificate in first place.

Okhttp3, Hostname cannot be verified in case SSL certificate is issued for IP address

1 Answers1