KB Article #181099

host name 'server.com' in request does not match server's certificate subject

Problem

2 API Managers responds differently to the requests toward the same API:

ERROR 03.06.20 14:05:57.057 host name 'server.com' in request does not match server's certificate subject { subject: /O=Group/OU=Applications/title=company/role=IFS/CN=otherserver.com, thumbprint: 60:21:36:10:C3:A4:34:D6:79:49:73:B8:76:A9:78:DF:10:4E:6E:83 }.

ERROR 03.06.20 14:05:57.057 [SSL alert write 0x22a, 0x4]: bad certificate [fatal].

ERROR 03.06.20 14:05:57.057 [SSL_connect, 0x4]: error - certificate rejected.

ERROR 03.06.20 14:05:57.057 transient failure connecting to remote: SSL protocol error

error:140CF086:SSL routines:ssl_verify_cert_chain:certificate verify failed, source location: crypto.cpp:262

error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed, source location: ssl/statem/statem_clnt.c:1


Cause is:

- host name in request does not match server's certificate subject

> host name 'server.com' differs than CN=otherserver.com

- the configuration was different on the 2 nodes of API Manager.


Resolution

Deploying the same configuration simultaneously on 2 nodes has solved this issue.