Jump to content
We've recently updated our Privacy Statement, available here ×
  • SSL certificate mismatch not allowed anymore in TIBCO Jaspersoft®​​​​​​​ Studio 7.1.0


    Jim W
    • Features: User Authorization Version: v7 Product: Jaspersoft® Studio

    Problem Description:

    1. You installed TIBCO Jaspersoft® Studio v7.5.0 or v7.1.0. 
    2. You then downloaded the certificate and imported it into Jaspersoft Studio's cacerts. 
    3. You then tried to create a server connection to a jasperserver repository over https on port 8443, for example. 

    A new pop-up appeared asking to trust the certificate you had just imported. You clicked "Trust" and got the following pop-up error:

    "Exception, if you want to see more information look into details. 
    Reason: ; nested exception is: javax.net.ssl.SSLPeerUnverifiedException: 
    Certificate for <172.16.78.100> doesn't match any of the subject alternative names: [*.abc.org, abc.org]". 
    

    This seems to mean that the certificate is valid for connections to anything.abc.org or to abc.org itself. Unfortunately, you are not connecting to abc.org; you are connecting directly over IP, which renders the certificate invalid.

    With TIBCO Jaspersoft® Studio 5.6, you can still connect via https even with this mismatch.


    Solution: 

    Jaspersoft® Studio 5.6 is a less secure implementation, it accepts such a mismatch.  Jaspersoft® Studio 7.5.0 uses new libraries, security is more strict.  For long term, a less secure implementation is not desirable. Therefore, the current behavior for Jaspersoft® Studio v7.1.0 and new releases forward will continue this trend for stricter implementations.

    To avoid the error, we recommend solving the problem by configuring the infrastructure correctly instead of trying to change Jaspersoft® Studio.  For example, setup a correct certificate for these IP's.  Perhaps using matching hostnames in *.abc.org for these IP's.


    User Feedback

    Recommended Comments

    There are no comments to display.



    Create an account or sign in to comment

    You need to be a member in order to leave a comment

    Create an account

    Sign up for a new account in our community. It's easy!

    Register a new account

    Sign in

    Already have an account? Sign in here.

    Sign In Now

×
×
  • Create New...