Uploaded image for project: 'Confluence Server and Data Center'
  1. Confluence Server and Data Center
  2. CONFSERVER-38853

"No subject alternative names matching IP address" error after upgrade

    XMLWordPrintable

    Details

      Description

      We just upgraded our test server from confluence 5.8.5 to 5.8.9 and LDAP authentication immediately failed and we started getting the following error when trying to test the ldap connection from within confluence (hostname and IP changed below for security):

      Test basic connection : Failed
      our.internal.hostname.com:3269; nested exception is javax.naming.CommunicationException: our.internal.hostname.com:3269 [Root exception is javax.net.ssl.SSLHandshakeException: java.security.cert.CertificateException: No subject alternative names matching IP address ##.##.##.## found]
      

      Our certificate has a field as follows but is lacking the "SUBJECT" field.

        X509v3 Subject Alternative Name: critical
        DNS:our.internal.hostname.com
      

      We do not list the IP address anywhere within the certificate either.

      Previous versions of Confluence worked fine and this certificate also works on JIRA "v6.4.9#64024-sha1:1f1084e".

        Attachments

          Issue Links

            Activity

              People

              Assignee:
              Unassigned
              Reporter:
              chris_doughty Chris Doughty
              Votes:
              0 Vote for this issue
              Watchers:
              7 Start watching this issue

                Dates

                Created:
                Updated:
                Resolved: