jer-gentoo opened a new issue #996: TLS client: In state certify at
ssl_handshake.erl:1626 generated CLIENT ALERT: Fatal - Handshake Failure -
{bad_cert,hostname_check_failed}
URL: https://github.com/apache/couchdb/issues/996
In 1.7.1, I cannot certify replication peers any longer. This worked nicely
in 1.6.1 with this configuration snippet:
```
[replicator]
...
; Set to true to validate peer certificates.
verify_ssl_certificates = true
; File containing a list of peer trusted certificates (in the PEM format).
ssl_trusted_certificates_file = /etc/ssl/certs/ca-certificates.crt
fail_if_no_peer_cert = true
; Maximum peer certificate depth (must be set even if certificate validation
is off).
ssl_certificate_max_depth = 3
```
Using any other means to connect to and check the certificate of the same
remote host (a Cloudant subdomain) work fine.
Erlang is OTP 20.
Any ideas on how to debug this are appreciated.
----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on GitHub and use the
URL above to go to the specific comment.
For queries about this service, please contact Infrastructure at:
[email protected]
With regards,
Apache Git Services
