No subject alternative DNS name matching

[doahh]

Does anyone know how to fix this? I have seen a few posts in places about editing the HostnameVerifier in the JDK but as I have cas running on my local machine and don't need to modify the file there I don't want to do that on my other machine:

javax.net.ssl.SSLHandshakeException: java.security.cert.CertificateException: No subject alternative DNS name matching prosoc.co.uk found

[doahh]

It looks like this is something to do with Tomcat being fronted by Apache and them both using different SSL certificates. It works if I access Tomcat directly after following this post:

http://blogs.sun.com/andreas/entry/no_more_unable_to_find

but as soon as it is fronted by Apache it fails again. Not too surprising really but I am not sure of the solution to getting the certificates sorted out properly.

doahh wrote:

Does anyone know how to fix this? I have seen a few posts in places about editing the HostnameVerifier in the JDK but as I have cas running on my local machine and don't need to modify the file there I don't want to do that on my other machine:

javax.net.ssl.SSLHandshakeException: java.security.cert.CertificateException: No subject alternative DNS name matching prosoc.co.uk found

[doahh]

There is nothing like finding the answer 5 minutes after posting:

http://www.zimbra.com/forums/administrators/9832-exporting-private-key-keystore-use-postfix-apache.html

doahh wrote:

It looks like this is something to do with Tomcat being fronted by Apache and them both using different SSL certificates. It works if I access Tomcat directly after following this post:

http://blogs.sun.com/andreas/entry/no_more_unable_to_find

but as soon as it is fronted by Apache it fails again. Not too surprising really but I am not sure of the solution to getting the certificates sorted out properly.

doahh wrote:

Does anyone know how to fix this? I have seen a few posts in places about editing the HostnameVerifier in the JDK but as I have cas running on my local machine and don't need to modify the file there I don't want to do that on my other machine:

javax.net.ssl.SSLHandshakeException: java.security.cert.CertificateException: No subject alternative DNS name matching prosoc.co.uk found