Kbase P147818: Cannot connect to SSL enabled AppServer via SSL if using alias
| Autor |
Progress Software Corporation - Progress |
| Acesso |
Público |
| Publicação |
11/06/2009 |
|
Status: Unverified
SYMPTOM(s):
Cannot connect to SSL enabled AppServer via SSL
Secure Socket Layer (SSL) failure. error code -55: CONNECT HostName: (<host name>) does not match Certificate (<alias name>): (9318)
FACT(s) (Environment):
OpenEdge 10.x
Using alias instead of host name in Certificate
UNIX
CAUSE:
When using registrationMode=Register-LocalHost the real machine name gets returned back to the SSL client which then does not fit the SSL certificate which was using the alias name as host name.
FIX:
Use
registrationMode=Register-HostName
hostName=<alias name>
where <alias name> needs to get replaced with your alias name used in the SSL certificate for the specific AppServer.
This can be done via the Progress Explorer tool ->
AppServer broker properties under Controlling NameServer the Registration mode
to use Host name for which you specify your alias instead of the default Broker Host IP Address.