Bruce J Schuchardt created GEODE-8144:
-----------------------------------------

             Summary: endpoint identification in servers is not working
                 Key: GEODE-8144
                 URL: https://issues.apache.org/jira/browse/GEODE-8144
             Project: Geode
          Issue Type: Bug
          Components: membership, messaging
            Reporter: Bruce J Schuchardt


If you enable endpoint identification in a server the server will not start.  
It will log exceptions like this:

 
{noformat}
Caused by: javax.net.ssl.SSLHandshakeException: General SSLEngine problemCaused 
by: javax.net.ssl.SSLHandshakeException: General SSLEngine problem at 
sun.security.ssl.Alerts.getSSLException(Alerts.java:198) at 
sun.security.ssl.SSLEngineImpl.fatal(SSLEngineImpl.java:1729) at 
sun.security.ssl.Handshaker.fatalSE(Handshaker.java:333) at 
sun.security.ssl.Handshaker.fatalSE(Handshaker.java:325) at 
sun.security.ssl.ClientHandshaker.serverCertificate(ClientHandshaker.java:1688) 
at sun.security.ssl.ClientHandshaker.processMessage(ClientHandshaker.java:226) 
at sun.security.ssl.Handshaker.processLoop(Handshaker.java:1082) at 
sun.security.ssl.Handshaker$1.run(Handshaker.java:1015) at 
sun.security.ssl.Handshaker$1.run(Handshaker.java:1012) at 
java.security.AccessController.doPrivileged(Native Method) at 
sun.security.ssl.Handshaker$DelegatedTask.run(Handshaker.java:1504) at 
org.apache.geode.internal.net.NioSslEngine.handleBlockingTasks(NioSslEngine.java:225)
 at org.apache.geode.internal.net.NioSslEngine.handshake(NioSslEngine.java:185) 
... 27 moreCaused by: java.security.cert.CertificateException: No subject 
alternative names matching IP address 10.118.26.62 found at 
sun.security.util.HostnameChecker.matchIP(HostnameChecker.java:168) at 
sun.security.util.HostnameChecker.match(HostnameChecker.java:94) at 
sun.security.ssl.X509TrustManagerImpl.checkIdentity(X509TrustManagerImpl.java:462)
 at 
sun.security.ssl.X509TrustManagerImpl.checkIdentity(X509TrustManagerImpl.java:442)
 at 
sun.security.ssl.X509TrustManagerImpl.checkTrusted(X509TrustManagerImpl.java:261)
 at 
sun.security.ssl.X509TrustManagerImpl.checkServerTrusted(X509TrustManagerImpl.java:144)
 at 
sun.security.ssl.ClientHandshaker.serverCertificate(ClientHandshaker.java:1675) 
... 35 more {noformat}



--
This message was sent by Atlassian Jira
(v8.3.4#803005)

Reply via email to