Error retrieving metadata: SSLPeerUnverifiedException

[Baron Fujimoto]

I'm trying to load an SP's metadata in IdP 2.4.4 with a relying-party
entry like the following:

<MetadataProvider xsi:type="FileBackedHTTPMetadataProvider" xmlns="urn:mace:shibboleth:2.0:metadata"
        id="foo"
        metadataURL="https://meta.example.com/foo-metadata.xml"
        backingFile="/path/to/idp/metadata/foo-metadata.xml" />

But I'm getting the following error:

ERROR [org.opensaml.saml2.metadata.provider.HTTPMetadataProvider] Error retrieving metadata
from https://meta.example.com/foo-metadata.xml
javax.net.ssl.SSLPeerUnverifiedException: SSL peer failed hostname validation for name: null

It looks like the metadata host has a wildcard SSL cert:

$ openssl s_client -connect meta.example.com:443 < /dev/null 2>&1 | grep ^subject
subject=/OU=Domain Control Validated/CN=*.example.com

I've also tried an http variant of the metadataURL, but it appears that
the metadata host is also redirecting all traffic to https and I get the
same error.

Is there a way to resolve this in our config?

-baron
-- 
Baron Fujimoto <baron at hawaii.edu> :: UH Information Technology Services
minutas cantorum, minutas balorum, minutas carboratum desendus pantorum