Uploaded image for project: 'Confluence Data Center'
  1. Confluence Data Center
  2. CONFSERVER-38853

"No subject alternative names matching IP address" error after upgrade

    XMLWordPrintable

Details

    • Bug
    • Resolution: Not a bug
    • Low
    • None
    • 5.8.9
    • None

    Description

      We just upgraded our test server from confluence 5.8.5 to 5.8.9 and LDAP authentication immediately failed and we started getting the following error when trying to test the ldap connection from within confluence (hostname and IP changed below for security):

      Test basic connection : Failed
      our.internal.hostname.com:3269; nested exception is javax.naming.CommunicationException: our.internal.hostname.com:3269 [Root exception is javax.net.ssl.SSLHandshakeException: java.security.cert.CertificateException: No subject alternative names matching IP address ##.##.##.## found]
      

      Our certificate has a field as follows but is lacking the "SUBJECT" field.

        X509v3 Subject Alternative Name: critical
        DNS:our.internal.hostname.com
      

      We do not list the IP address anywhere within the certificate either.

      Previous versions of Confluence worked fine and this certificate also works on JIRA "v6.4.9#64024-sha1:1f1084e".

      Attachments

        Issue Links

          Activity

            People

              Unassigned Unassigned
              cbfcce9feaae Chris Doughty
              Votes:
              0 Vote for this issue
              Watchers:
              7 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: