Java Certificate Mismatch

Asked Oct 30 '19 at 14:10

Active Oct 30 '19 at 14:10

Viewed 153 times

I am getting the following error while establishing an HTTPs connection

javax.net.ssl.SSLPeerUnverifiedException: Certificate for <www.mysite.dev.prod.domain.net> doesn't match any of the subject alternative names: [mysite.dev.prod.domain.net, *.dev.prod.domain.net]-

I am not sure what's wrong because CN clearly having my URL.

asked Oct 30 '19 at 14:10

The_learning_guy

2

You know that `www.mysite` is not the same as `mysite`, right? – RealSkeptic Oct 30 '19 at 14:13
@RealSkeptic but this should be fine right `*.dev.prod.domain.net` ? – The_learning_guy Oct 30 '19 at 14:16
No, because `*` only covers *one* level of the domain, not multiple levels. – RealSkeptic Oct 30 '19 at 14:16
@RealSkeptic it should be `www.mysite.dev.prod.domain.net` right ? if i want to have wildcard here what it should be – The_learning_guy Oct 30 '19 at 14:24
1

If you have a wildcard like `*.dev.prod.domain.net`, then you can only have domains that have one word before the `.dev`. You can't have `www.mysite`. – RealSkeptic Oct 30 '19 at 14:30
See links in my comment at https://stackoverflow.com/questions/49937501/haproxy-uses-wrong-ssl-certificate-on-domain-redirection – dave_thompson_085 Oct 30 '19 at 17:03

Java Certificate Mismatch

0 Answers0

Linked