Wednesday, January 8, 2014

OAG - Oracle API Gateway- How to turn off Host name verification


Issue :
While consuming the HTTPS services sometime the certificate presented by the Remote Host has  identity  does not match with the host name or IP given in the service URL. In this case OAG will throw the below error

host name 'services.harish.com' in request does not match server's certificate subject { subject: /C=US/ST=NJ/L=Hillsborough/O=SOA/OU=IT/CN=Harish }.
ERROR  1/8/14 16:56:52.601                 [SSL alert write 0x22a, 0x1131]: bad certificate [fatal] { subject: /C=US/ST=NJ/L=Hillsborough/O=SOA/OU=IT/CN=Harish }.
ERROR  1/8/14 16:56:52.601                 [SSL_connect, 0x1131]: error - certificate rejected { subject:/C=US/ST=NJ/L=Hillsborough/O=SOA/OU=IT/CN=Harish }.
ERROR  1/8/14 16:56:52.601                 [SSL_connect, 0x1131]: error - certificate rejected.
ERROR  1/8/14 16:56:52.601                 transient failure connecting to remote: SSL protocol error
ERROR  1/8/14 16:56:52.601         The message [Id-3faba97a52cdc9a40f000000] logged Failure at 01.08.2014 16:56:52,601 with log description: Failed to route request to endpoint.
ERROR  1/8/14 16:56:52.602         Filter that caused failure: Connect to URL
ERROR  1/8/14 16:56:52.602         Policy '/harish/try.asmx' {


 Solution :

Navigate to " Remote Host Settings" Dialog box  (Remote Host name ->Edit)
Unchecked the check box - for   "Verify Server's Certificate matches requested hostname" . This is selected by default.


This is the screenshot for OAG-11.1.2.1.0's policy studio.


No comments:

Post a Comment