Webservice over SSL - hostname in certificate didn't match error

Yellowfin FAQ shared this problem 3 months ago
Resolved

We have SSL/TLS configured on Yellowfin. After upgrade to 8.0.6. The APIs which were working before upgrade are failing with below error. We are observing this in all environments.

javax.net.ssl.SSLException: hostname in certificate didn't match: <localhost> != <yellowfin.com> 	at org.apache.axis.AxisFault.makeFault(AxisFault.java:101) 	at org.apache.axis.transport.http.HTTPSender.invoke(HTTPSender.java:154) 	at org.apache.axis.strategies.InvocationStrategy.visit(InvocationStrategy.java:32)

Comments (1)

photo
1

You may come across this issue upgrading to 7.4.13, 8.0.5 or 9.1 and above. This is caused by attempting to bypass hostname verification for SSL certificates used in Webservice calls.


Upgrades were made to some of the packaged external components used by Yellowfin inline with our security monitoring and testing procedures.


Going forward, every Yellowfin host looking to use SSL, will need to use a certificate specifically generated for that machine's hostname.