Uploaded image for project: 'Confluence Data Center'
  1. Confluence Data Center
  2. CONFSERVER-38853

"No subject alternative names matching IP address" error after upgrade

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Not a bug
    • Icon: Low Low
    • None
    • 5.8.9
    • None

      We just upgraded our test server from confluence 5.8.5 to 5.8.9 and LDAP authentication immediately failed and we started getting the following error when trying to test the ldap connection from within confluence (hostname and IP changed below for security):

      Test basic connection : Failed
      our.internal.hostname.com:3269; nested exception is javax.naming.CommunicationException: our.internal.hostname.com:3269 [Root exception is javax.net.ssl.SSLHandshakeException: java.security.cert.CertificateException: No subject alternative names matching IP address ##.##.##.## found]
      

      Our certificate has a field as follows but is lacking the "SUBJECT" field.

        X509v3 Subject Alternative Name: critical
        DNS:our.internal.hostname.com
      

      We do not list the IP address anywhere within the certificate either.

      Previous versions of Confluence worked fine and this certificate also works on JIRA "v6.4.9#64024-sha1:1f1084e".

            Unassigned Unassigned
            cbfcce9feaae Chris Doughty
            Votes:
            0 Vote for this issue
            Watchers:
            7 Start watching this issue

              Created:
              Updated:
              Resolved: