Custom Cert for Webservice Connector

Identity Security Cloud (ISC) ISC Discussion and Questions
,
1

:bangbang: Please be sure you’ve read the docs and API specs before asking for help. Also, please be sure you’ve searched the forum for your answer before you create a new topic.

I have a VA based Webservice connector with custom ssl cert which i added to VA certificates and restarted ccg but i still get the below error :

Exception occurred in Test Connection.Url: ``https://hostname.domain.com/api/v1/usermgmt/users/?param1=value1&param2=value2&param3=value3``, Message: 0 : javax.net.ssl.SSLPeerUnverifiedException: Certificate for <``hostname.domain.com``> doesn't match any of the subject alternative names: [web.app.local], HTTP Error Code: 0

Please consider addressing the following when creating your topic:

  • What have you tried? I have the custom cert chain and added it to VAs cert
  • What errors did you face (share screenshots)? mentioned above
  • Share the details of your efforts (code / search query, workflow json etc.)?

Looks this is the same issue but cannot access the link anymore : Web Services Connector - custom CA

  • What is the result you are getting and what were you expecting?

I am sure there is a way to trust the cert or SAM if its in VA but cannot figure what else is missing.

2

Hi @lampard08

From my understanding, It seems VA trusts the cert but the hostname doesn’t match what’s in the cert. Is hostname.domain.com included in the SAN? If it’s mistmatch it will fail.