KB Article #181099
host name 'server.com' in request does not match server's certificate subject
Problem
2 API Managers responds differently to the requests toward the same API:
ERROR 03.06.20 14:05:57.057 host name 'server.com' in request does not match server's certificate subject { subject: /O=Group/OU=Applications/title=company/role=IFS/CN=otherserver.com, thumbprint: 60:21:36:10:C3:A4:34:D6:79:49:73:B8:76:A9:78:DF:10:4E:6E:83 }.
ERROR 03.06.20 14:05:57.057 [SSL alert write 0x22a, 0x4]: bad certificate [fatal].
ERROR 03.06.20 14:05:57.057 [SSL_connect, 0x4]: error - certificate rejected.
ERROR 03.06.20 14:05:57.057 transient failure connecting to remote: SSL protocol error
error:140CF086:SSL routines:ssl_verify_cert_chain:certificate verify failed, source location: crypto.cpp:262
error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed, source location: ssl/statem/statem_clnt.c:1
Cause is:
- host name in request does not match server's certificate subject
> host name 'server.com' differs than CN=otherserver.com
- the configuration was different on the 2 nodes of API Manager.
Resolution
Deploying the same configuration simultaneously on 2 nodes has solved this issue.