Bruce J Schuchardt created GEODE-9139:
-----------------------------------------

             Summary: SSLException in starting up a Locator
                 Key: GEODE-9139
                 URL: https://issues.apache.org/jira/browse/GEODE-9139
             Project: Geode
          Issue Type: Test
          Components: membership, messaging
            Reporter: Bruce J Schuchardt


If you start up a locator using its host name, without a domain name, as a bind 
address you may get an SSLException in the form

{noformat}
javax.net.ssl.SSLHandshakeException: java.security.cert.CertificateException: 
No subject alternative DNS name matching hostname.domainname found
{noformat}

The LocatorLauncher and InternalLocator throw away the bind address string and 
later do a reverse lookup to find the fully qualified hostname to use in 
endpoint identification matching.    If the locator's own TLS certificate 
doesn't have the fully qualified name in it as a Subject Alternate Name the 
connection that the Locator makes to its own location service will fail.



--
This message was sent by Atlassian Jira
(v8.3.4#803005)

Reply via email to