Problem Description:
- You installed TIBCO Jaspersoft® Studio v7.5.0 or v7.1.0.
- You then downloaded the certificate and imported it into Jaspersoft Studio's cacerts.
- You then tried to create a server connection to a jasperserver repository over https on port 8443, for example.
A new pop-up appeared asking to trust the certificate you had just imported. You clicked "Trust" and got the following pop-up error:
"Exception, if you want to see more information look into details. Reason: ; nested exception is: javax.net.ssl.SSLPeerUnverifiedException: Certificate for <172.16.78.100> doesn't match any of the subject alternative names: [*.abc.org, abc.org]".
This seems to mean that the certificate is valid for connections to anything.abc.org or to abc.org itself. Unfortunately, you are not connecting to abc.org; you are connecting directly over IP, which renders the certificate invalid.
With TIBCO Jaspersoft® Studio 5.6, you can still connect via https even with this mismatch.
Solution:
Jaspersoft® Studio 5.6 is a less secure implementation, it accepts such a mismatch. Jaspersoft® Studio 7.5.0 uses new libraries, security is more strict. For long term, a less secure implementation is not desirable. Therefore, the current behavior for Jaspersoft® Studio v7.1.0 and new releases forward will continue this trend for stricter implementations.
To avoid the error, we recommend solving the problem by configuring the infrastructure correctly instead of trying to change Jaspersoft® Studio. For example, setup a correct certificate for these IP's. Perhaps using matching hostnames in *.abc.org for these IP's.
Recommended Comments
There are no comments to display.
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now