[JAVA-1687] Enable SSL host name verification for automated SSL tests Created: 13/Mar/15  Updated: 20/Dec/19  Resolved: 20/Dec/19

Status: Closed
Project: Java Driver
Component/s: Test Coverage
Affects Version/s: None
Fix Version/s: None

Type: Improvement Priority: Major - P3
Reporter: Jeffrey Yemin Assignee: Unassigned
Resolution: Done Votes: 0
Labels: None
Remaining Estimate: Not Specified
Time Spent: Not Specified
Original Estimate: Not Specified

Issue Links:
Depends
depends on SERVER-17632 Several certificates in jstests/lib h... Backlog

 Description   

Currently it is disabled in the fixtures, until we get Jenkins using a valid PEM file.



 Comments   
Comment by Jeffrey Yemin [ 17/Mar/15 ]

Root cause is an incorrectly generated server.pem file, which lists 127.0.0.1 as an alternative name of type DNS instead of type IP.

Comment by Jeffrey Yemin [ 17/Mar/15 ]

It's working in all cases except replica sets, where we get the following exception:

java.security.cert.CertificateException: No subject alternative names matching IP address 127.0.0.1 found

Generated at Thu Feb 08 08:55:14 UTC 2024 using Jira 9.7.1#970001-sha1:2222b88b221c4928ef0de3161136cc90c8356a66.