Hostname Verification failed for certificate with CommonName 'gawlsdev02.ss

Hi All,
I want to know the meaning and the reason of this exception:
<Jun 17, 2010 2:05:52 PM EDT> <Warning> <Security> <BEA-090504> <Certificate chain received from gawlsdev02 - 147.141.83.104 failed
hostname verification check. Certificate contained gawlsdev02.ssga.statestr.com but check expected gawlsdev02>
<Jun 17, 2010 2:05:52 PM EDT> <Debug> <TLS> <000000> <Hostname Verification failed for certificate with CommonName 'gawlsdev02.ssga.
statestr.com' against hostname: gawlsdev02>
thanks in advance.

When Webloigic Server tries to validate the certificate, it compares te CN of the certificate with the hostname from where the request is coming from.
If they don't match, hostname verfication fails and SSL connection is not established.
In your case I see the CN is gawlsdev02.ssga.statestr.com whereas WLS is expecting it to be gawlsdev02.
U can use this option to ignore host name verification
-Dweblogic.security.SSL.ignoreHostnameVerification=true
To know about other SSL issues, u can refer this
http://weblogic-wonders.com/weblogic/2010/01/28/troubleshooting-ssl-issues/
-Faisal

Similar Messages

Custom SSL Hostname Verifier - SSL Hostname Verification Failed

Background:
I am using a java client deployed in weblogic which connects to a 3rd party url over HTTPS.
version: WebLogic server 10.3.0
Issue:
I am connecting to say www.abc.com and the site is presenting its certificate as **.ABC.com*. and I am getting Hostname verification failed.
I am using weblogic's default hotname verifier.
Setting hostname verification to false resolving this error, but I want to keep it for security.
Can anybody please share some best practices to write a custom HostnameVerifier to overcome this kind of problems?
Thanks in advance!

An example - this validates that a cert sent to a cluster member ( such as by OSB's internals ) will be validated when the cluster uses a a load balancer address ( defined in the cluster's http tab )
private final String QA_LB_NAME = "my_loadbalancer.net";
private final String QA_HOST1 = "my_serverhost1.net";
private final String QA_HOST2 = "my_serverhost2.net";
public boolean verify(String hostname, SSLSession session) {
try {
Certificate cert = session.getPeerCertificates()[0];
byte[] encoded = cert.getEncoded();
CertificateFactory cf = CertificateFactory.getInstance("X.509");
ByteArrayInputStream bais = new ByteArrayInputStream(encoded);
X509Certificate xcert = (X509Certificate)cf.generateCertificate(bais);
String cn = getCanonicalName(xcert.getSubjectDN().getName());
if (cn.equals(hostname))
return true;
// Allow a match if the load balancer cert is presented from one of its
// servers
if (cn.equals(QA_LB_NAME) &&
((hostname.equals(QA_HOST1)) || (hostname.equals(QA_HOST2))))
return true;
// all other certs fail
return false ;
You can do something similar with your wildcard example - allow the validation if the cn is "*.abc.com" and the hostname is "www.abc.com"
As far as best practices, I would suggest only have specific hard-coded validation entries for known certificates such as your wild card example. You want the default behavior ( of the hostname matching the CN name ) plus your particular case - and nothing else

Connection verification failed for data source using mySQL

Hi,
I having problem with mySQL datasource and getting the above error. This is only happening in our staging server. We are using ColdFusion 8 running JRUN4 and trying to connect to mySQL v 5.1.41. I tried adding DSN from my localhost using ColdFusion 9 developer edition and I am able to connect without error.I know that mysql server, username & password is valid. I can access the mysql also using mySQL gui tool from different pc and it works fine. I'm believe that this has something to do with mySQL driver? Can somebody shed some light on how can I fix my DSN connection problem? Thank you.
here's the error:
Connection verification failed for data source: forum
com.mysql.jdbc.CommunicationsException: Communications link failure due to underlying exception: ** BEGIN NESTED EXCEPTION ** java.net.ConnectException MESSAGE: Connection timed out: connect STACKTRACE: java.net.ConnectException: Connection timed out: connect at java.net.PlainSocketImpl.socketConnect(Native Method) at java.net.PlainSocketImpl.doConnect(PlainSocketImpl.java:333) at java.net.PlainSocketImpl.connectToAddress(PlainSocketImpl.java:195) at java.net.PlainSocketImpl.connect(PlainSocketImpl.java:182) at java.net.SocksSocketImpl.connect(SocksSocketImpl.java:366) at java.net.Socket.connect(Socket.java:519) at java.net.Socket.connect(Socket.java:469) at java.net.Socket.(Socket.java:366) at java.net.Socket.(Socket.java:208) at com.mysql.jdbc.StandardSocketFactory.connect(StandardSocketFactory.java:173) at com.mysql.jdbc.MysqlIO.(MysqlIO.java:267) at com.mysql.jdbc.Connection.createNewIO(Connection.java:2739) at com.mysql.jdbc.Connection.(Connection.java:1553) at com.mysql.jdbc.NonRegisteringDriver.connect(NonRegisteringDriver.java:266) at coldfusion.server.j2ee.sql.pool.JDBCPool.createPhysicalConnection(JDBCPool.java:589) at coldfusion.server.j2ee.sql.pool.ConnectionRunner$RunnableConnection.run(ConnectionRunner. java:67) at java.lang.Thread.run(Thread.java:619) ** END NESTED EXCEPTION ** Last packet sent to the server was 0 ms ago.

http://www.adobe.com/cfusion/knowledgebase/index.cfm?id=6ef0253
HTH
Tim Carley
www.recfusion.com
[email protected]

Connection verification failed for data source:

Hi,
I having problem with mySQL datasource and getting the above error. This is only happening in our staging server. We are using ColdFusion 8 running JRUN4 and trying to connect to mySQL v 5.1.41. I tried adding DSN from my localhost using ColdFusion 9 developer edition and I am able to connect without error.I know that mysql server, username & password is valid. I can access the mysql also using mySQL gui tool from different pc and it works fine. I'm believe that this has something to do with mySQL driver? Can somebody shed some light on how can I fix my DSN connection problem? Thank you.
here's the error:
Connection verification failed for data source: forum
com.mysql.jdbc.CommunicationsException: Communications link failure due to underlying exception: ** BEGIN NESTED EXCEPTION ** java.net.ConnectException MESSAGE: Connection timed out: connect STACKTRACE: java.net.ConnectException: Connection timed out: connect at java.net.PlainSocketImpl.socketConnect(Native Method) at java.net.PlainSocketImpl.doConnect(PlainSocketImpl.java:333) at java.net.PlainSocketImpl.connectToAddress(PlainSocketImpl.java:195) at java.net.PlainSocketImpl.connect(PlainSocketImpl.java:182) at java.net.SocksSocketImpl.connect(SocksSocketImpl.java:366) at java.net.Socket.connect(Socket.java:519) at java.net.Socket.connect(Socket.java:469) at java.net.Socket.(Socket.java:366) at java.net.Socket.(Socket.java:208) at com.mysql.jdbc.StandardSocketFactory.connect(StandardSocketFactory.java:173) at com.mysql.jdbc.MysqlIO.(MysqlIO.java:267) at com.mysql.jdbc.Connection.createNewIO(Connection.java:2739) at com.mysql.jdbc.Connection.(Connection.java:1553) at com.mysql.jdbc.NonRegisteringDriver.connect(NonRegisteringDriver.java:266) at coldfusion.server.j2ee.sql.pool.JDBCPool.createPhysicalConnection(JDBCPool.java :589) at coldfusion.server.j2ee.sql.pool.ConnectionRunner$RunnableConnection.run(Connect ionRunner.java:67) at java.lang.Thread.run(Thread.java:619) ** END NESTED EXCEPTION ** Last packet sent to the server was 0 ms ago.

Also make sure your firewall has the required port open (1433
default) and if you are running 2003 on the SQL box, especially if
you ran the security Wizard, make sure the IPSec is allowing the CF
box to communicate with it, and vise verse.

Verification failed for: Property Template Resource: The template specified

Hi All,
we are using Property Propagation report, but it is giving following message:
Verification failed for: Property Template Resource: The template specified does not exist
Regards,
Ganga

Hi All,
issue is reolved. We should not give '%20' as indicator of Space.
that was the mistacke.
Regards,
Ganga

Connection verification failed for data source on port 1433

Trying to set up a DSN for a SQL Server database on a new computer and it's failing every time.
Connection verification failed for data source: csf
java.sql.SQLNonTransientConnectionException: [Macromedia][SQLServer JDBC Driver]Error establishing socket to host and port: SANDYPC:1433. Reason: Connection refused: connect
The root cause was that: java.sql.SQLNonTransientConnectionException: [Macromedia][SQLServer JDBC Driver]Error establishing socket to host and port: SANDYPC:1433. Reason: Connection refused: connect
Now, when I installed CF 11, it installed on port 8500. However, when I try changing the port in the setup to 8500, I get this error:
Connection verification failed for data source: csf
java.sql.SQLException: Timed out trying to establish connection
The root cause was that: java.sql.SQLException: Timed out trying to establish connection
I cannot find anything online on how to fix this! HELP!!!

Hi,
Is that SQL Express edition? If so perhaps TCP protocol is not enabled. Is Windows firewall turned on? Check port 1433 is open.
Normally you would not create a datasource to apache port 8500, that is a web server not database server port.
HTH, Carl.

Signature verification failed for PolicyAssignmentID

I am in the process of setting up a new SCCM 2012 R2 server. I have just begun to add some test boxes to the environment and every server thus far is registering in SCCM but is not pulling down its policies. When doing a policy retrieval evaluation
cycle the below is
immediately spit out in the PolicyAgent.log file. Any help would be
appreciated!
Signature verification failed for PolicyAssignmentID {XXXXXXXX-XXXX-XXXX-XXXX-XXXXXXXXXXXX}
Raising event:
instance of CCM_PolicyAgent_PolicyAuthorizationFailure
ClientID = "GUID:F504615C-04F8-462D-B341-265C2FAEE7E7";
DateTime = "20140708132926.819000+000";
PolicyNamespace = "\\\\.\\ROOT\\ccm\\policy\\Machine\\RequestedConfig";
PolicySource = "SMS:RET";
ProcessID = 3532;
ThreadID = 4320;

It seems I have resolved my issue. The cause was in the AD publishing. I'm not sure if some parts were corrupt or simply missing but after removing the AD forest from 'Administration\Hierarchy Configuration\Active Directory Forests' in the
SCCM admin console and re-adding it back SCCM was able to republish the needed info. Then after a few minutes to allow for replication I was able to run a machine policy cycle which pulled all of my policies down!

Clustre verification failed for 10gR2 on RHEL3 Update 6

When i run this command (for Release1):
runcluvfy.sh comp sys -n node1,node2-p crs -r 10gR1 -osdba dba -orainv oinstall -verbose
It shows success.
But when i run (for Release2):
runcluvfy.sh comp sys -n node1,node2-p crs -r 10gR2 -osdba dba -orainv oinstall -verbose
It fails with
System requirement failed for 'crs'
Verification of system requirement was unsuccessful on all the nodes.
The package on which it fails is
Check: Package existence for "libpng-10-1.0.13-8"
Node Name Status Comment
node1 libpng-1.2.2-25 failed
node2 libpng-1.2.2-25 failed
Result: Package existence check failed for "libpng-10-1.0.13-8".
Initially when i ran CVU for nodeconnection check it failed and i continued due to the following message at metalink.
runcluvfy.sh comp ssa -n node1,node2verbose
CVU reports the error below if non-routable IP addresses such as 192.168.*.*, 172.*.*.* or 10.*.*.* are used for the public interface (eth0).
ERROR:
Could not find a suitable set of interfaces for VIPs.
Node connectivity check failed.
The error can be safely ignored. As a workaround, invoke the Virtual IP Configuration Assistant (VIPCA) manually during the installation on the second node and a suitable network interface (eth0) will be detected.
So is it the cause of this failed test or the libpng package problem ???
Thanks in Advance
Sujan Gautam

When you say Failed Explain!::: Do you mean when you go to About Phone then System Update it is Not Updating or what. If this is the Case it can Take a few Days from when the Update is Re-leased to Move around. You can help your Razr to get it by Turning it Off an then Back on. Once or twice Threw the Day to help try to Push it on it. I have done this with my Phones in the Past to Help push the Update on it. But as i said it may take a Few Days before you get it,,,b33

BAPI_SalesOrder_CreateFromDat2 fails for items with free goods

Hi all, I have a very weird problem when I am trying to create a sales order using SAP .net connector with the BAPI function BAPI_SalesOrder_CreateFromDat2(). The problem happens through the following scenario:
1 - Item X has a free good rule on it that states "If user buys 5 Cartoons of Item X he will take 1 pack of Item Y free of charge" while Item Z has no rules like this
2 - using BAPI and .net connector, an order is needed to be created with following details:
a - Item X with quantity 6 Cartoons.
b- Item Z with quantity 3 Cartoons
3 - If BAPI_SalesOrder_CreateFromDat2() assigns these details to Order_Items_In with the same order (a then b), SAP will return an error for Item z that states "No item category available (Table T184 ZKE NORM KEN)."; while if the function tries to create the order with details in reverse order (b then a ), the order will be created successfully.
I have done the following steps:
1 - Tried the same order in SAP GUI but it succeeded. (So no problem in Item Category Determination)
2 - Tries the same order with the suspicious order in the BAPI function Test inside SAP GUI (using tcode BAPI or SE37) but the function had not return any errors also.
3 - Tried to send Item Category in code when calling the bapi function (Forced the code to KEN), but the same message appeared as SAP insist on redetermining the Item Category and return this meaningless message.
thanks

Hi Mohamed Abd Elbaset,
I am facing the same issue while creating the Sales order through "BAPI_SALESORDER_CREATEFROMDAT2" All is going well in normal cases but when I process the contract with FREE GOODS line items for which free goods condition record is maintained it fails
to create the Sales order. Is there any special treatment for this Free goods case..
Regards,

Filling of S table fails for fields with free form text or description

Hello Everyone,
We are trying to rollup a new InfoCube into our BWA system and it fails with a short dump CONVT_CODEPAGE with exception being CX_SY_CONVERSION_CODEPAGE when filling up S table for a description field.
The only difference between the new InfoCube we are trying to load and the other existing InfoCubes is that, the new InfoCube we are trying to load has a field/InfoObject which is free form description for a line item field.
Also, when I checked the application log the system gives out the message "A Character Set conversion is not possible".
Did anyone encounter this issue when trying to create BWA indexes for InfoCubes which have text columns in the InfoCube.
We are currently at revision 52.
Thanks in advance.

Hi Dharma,
It's an interesting and new BWA case for me, so sorry no direct answer. I'll try to replicate it in free time I hope you opened a message with SAP Support for this.
From pure BW modeling perspective I normally model this in a way that this "description" Characteristic A is marked as "Attribute-only" and then used as a display attribute of another Characteristic B, e.g. Line Item Number. From BWA perspective it means that A is not indexed into the accelerator and joined only for display during OLAP time.
Regards,
-Vitaliy

Ping failes for fqdn with two records, first record unavailable

Scenario is:
10.80.56.147 = DOWN (unavailable)
10.80.56.148 = UP (available)
bash-2.05# nslookup cscs.floreffe.se
Server: idns.floreffe.se
Address: 10.80.56.186
Name: cscs.floreffe.se
Addresses: 10.80.56.147, 10.80.56.148
bash-2.05# ping cscs.floreffe.se
no answer from cscs.floreffe.se
Why does ping fail? Why does not secondary IP address being used.

BadboyRune wrote:
Hi,
Thanks for your answer, I have alredy disabled nscd on the system. So Solaris doesn't make some kind of check if the first IP is reachable, or saves both addresses? No. That is uncommon in most UNIX applications. The application is usually trying to operate on a single address, and uses names just to look up the address that it will use.
There are more robust applications that become more complex with dynamic name changes supported, real-time failover support, etc, but that's not an OS feature, it's handled per-application. 'ping' does not do so. TCP connections are bound to a specific address. For an application to use TCP and multiple addresses, it has to recognize the problem, then re-establish a new connection with the host, etc... This is not commonly done.
The reason for the question in the first place are the redundancy problems we have faced. If the first address isn't reachable, the second one has to be used...
What's the application? Why is the address going down? In some cases this could be handled through the use of IPMP or maybe through a load-balancer application/appliance. But that would depend on your network topology and the actual problem that you're encountering.
Darren

SP12: Auto-provisioning failed for role with action "keep"

Hi,
If you want to keep an exisiting role for a user in CUP. It wasn't possible to change the validity of the role. Therefor you have to set parameter 145 value to 1 in database table VIRSA_AE_ERMCONFIG and refresh cache in CUP(solution with SP11).
But know we have problemes with the auto-provisioning.
We can enter the other validity of the role and after that the request provisioning failed. In our workflow the request rerouted to the admin because of escape-route settings. All other new roles in the request are assigned well to the user in the backend system.
Any ideas?
Many thanks,
Alexa

Hi,
we actually have the same Problem, that changes to the role validity with action "keep" are not provisioned to the SAP system.
If it is only possible to change the validity with the action "add" it is not possible to limit the validity of a previously unlimited role. Because as you said another role with the new validity dates is simply added to the existing roles.
The only workaround would be to delete the old role and add a new one with new validity dates. But in my opinion this workaround is not acceptable for the users.
Best Regards
Jonas

Verification Fails for Software Update AND files downloaded from Apple

Hi all,
Upon first running software update on my brand new MacBook Pro 15", I remember seeing that the verification of a couple downloads failed. After restarting repeatedly and running software update again and again, I eventually narrowed the culprit down to an iPhoto update image.
Bizarrely, even downloading the .dmg from the Apple Downloads site, in multiple browsers, would result in a failed verification. Yet downloading on other machines worked fine.
Now, I'm having trouble verifying the checksum of the iWork image from Apple's own site. I haven't the first clue about what's happening here.
Does anyone have even the faintest idea?
Thanks!

try if booting your Mac into _*safe mode*_ helps. while in safe mode, repair permissions using disk utility, then reboot normally.
if the .dmg mounts on one of your other Macs, you can use your network to install the software. mount the .dmg on the other Mac and connect to it from the problem machine.
JGG

Performing a mass rename on originals to get rid of backslashes in file names. Worked for most files but failed for some with OSSStatus -43. Can't find any info on error -43. Any ideas?

I'm moving all my managed files to be referenced so I can access from both Aperture and lightroom. Needed to do a rename on 16,000 files to get rid of backslashes in the file names. Most of the time it worked but for 1093 files it gave OSSStatus -43. I've tried googling the error and got nothing. Any ideas where to begin looking?
Thanks
Jim

How are you renaming the files? In the "File > Relocate original file" dialog panel? Are you using a custom name format?
Have you checked in Aperture, if the originals, that are giving you the error message, are still inside the Aperture library?

Log and Transfer Process Failed for AVCHD with SD card

I shoot on SD Cards using AVCHD technology.
It creates a file called “Private”.
When I want to ingest the footage into Final Cut, I must choose log and transfer and then drop the clip into the window.
I can see and watch the clip before I start the process but if fails when I try and complete the log and transfer process.
Any ideas / trouble shooting help to get this to work???

Fails how? What exactly happens? What do you see on your computer?
Exactly what format did you shoot? What settings are you using in FCP? What OS? What version of the software? What version of QuickTime? What computer? What drives? How's everything connected? What's the scratch disk? How's it formatted? That'll be a good start.

Hostname Verification failed for certificate with CommonName 'gawlsdev02.ss

Similar Messages

Maybe you are looking for