How to overcome javax.net.ssl.SSLPeerUnverifiedException on ldap connection

[Patrick Brunmayr]

I am using idp3 LDAP auth: Think it happens when resolving attributes regarding to log information.

Here is some trace

2016-08-03 13:24:45,513 - ERROR [net.shibboleth.idp.attribute.resolver.dc.ldap.impl.ConnectionFactoryValidator:95] - Connection factory validation failed
org.ldaptive.provider.ConnectionException: javax.net.ssl.SSLPeerUnverifiedException: hostname of the server '127.0.0.1' does not match the hostname in the server's certificate.
    at org.ldaptive.provider.jndi.JndiStartTLSConnectionFactory.createInternal(JndiStartTLSConnectionFactory.java:100)
Caused by: javax.net.ssl.SSLPeerUnverifiedException: hostname of the server '127.0.0.1' does not match the hostname in the server's certificate.
    at com.sun.jndi.ldap.ext.StartTlsResponseImpl.verify(Unknown Source)
Caused by: java.security.cert.CertificateException: No subject alternative names present
    at sun.security.util.HostnameChecker.matchIP(Unknown Source)



Am 03.08.2016 um 13:55 schrieb Peter Schober:

* Patrick Brunmayr <p.brunmayr at linzag.at><mailto:p.brunmayr at linzag.at> [2016-08-03 13:53]:


I am getting javax.net.ssl.SSLPeerUnverifiedException on my ldap
connector. I know why because i am using self signed cert and hostnames
do not match.



What IDP version is this? And is this from authentication (if so,
using JAAS or IDPv3's LDAP auth) or when resolving attributes?
-peter


--
Patrick Brunmayr
LINZ AG TELEKOM
Infrastruktur & Netzwerktechnik
Internet Services

Die LINZ AG TELEKOM ist ein Geschäftsbereich der LINZ STROM GmbH
für Energieerzeugung, -handel, -dienstleistungen und Telekommunikation.

4021 Linz,  Wiener Straße 151, Austria
Tel.:        +43(0)732/3400-5639
Fax:        +43(0)732/3400-155639
E-Mail:    p.brunmayr at linzag.at<mailto:p.brunmayr at linzag.at>
Internet:  www.linzag-telekom.at<http://www.linzag-telekom.at>

FN 199533 g des Landesgerichtes Linz
Zertifiziert nach:
EN ISO   9001 Qualitätsmanagement (QM)
OHSAS 18001 Arbeitsschutzmanagementsystem
ISO/IEC 27001 Informationssicherheits-Managementsystem (ISMS)




LINZ AG für Energie, Telekommunikation, Verkehr und Kommunale Dienste
A-4021 Linz, Wiener Straße 151, Postfach 1300, Tel. +43/732/3400-0, E-Mail: info at linzag.at


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20160803/bee4bc97/attachment-0001.html>