webMethods

webMethods

Join this online group to communicate across IBM product users and experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only
Back to discussions
Expand all | Collapse all

webMethods API Gateway Q&A - Disabling of hostname verification for SSL certificates

  • 1.  webMethods API Gateway Q&A - Disabling of hostname verification for SSL certificates

    Posted Tue February 27, 2024 05:57 AM

    Detailed explanation of the problem:

    When the HTTPS endpoints of API Gateway are invoked with a self-signed certificate, then the Developer Portal displays the SSL exception message.

    Error messages / full error message screenshot / log file:

    Exception: Caused by: [javax.net](http://javax.net/).ssl.SSLPeerUnverifiedException: Certificate for <IP ADDRESS> doesn't match any of the subject alternative names


    #API-Gateway
    #webMethods
    #API-Management
    #Tuesday-troubleshooting


  • 2.  RE: webMethods API Gateway Q&A - Disabling of hostname verification for SSL certificates

    Posted Tue February 27, 2024 05:57 AM

    Solved in webMethods Developer Portal 10.11 Fix 9. Below is the fix read me for user reference –
    DPO-890 –

    Disabling of hostname verification for SSL certificates. When the HTTPS endpoints of API Gateway are invoked with a self-signed certificate, the Developer Portal displays the SSL exception message.

    This issue is resolved. The hostname verification is disabled by default using the new setting ‘disable-host-name-verifier’ added to the application-dev.yml file.

    The default value of this setting is ‘true’.


    #API-Management
    #API-Gateway
    #webMethods
    #Tuesday-troubleshooting