Sandeep More created KNOX-2453:
----------------------------------
Summary: Zeppelinws fails with error 'Host does not match SNI'
Key: KNOX-2453
URL: https://issues.apache.org/jira/browse/KNOX-2453
Project: Apache Knox
Issue Type: Bug
Components: websockets
Reporter: Sandeep More
Assignee: Sandeep More
Fix For: 1.5.0
Knox will fail to proxy ZeppelinWS service when zeppelin is SSL configured and
has multiple SAN entries in its certificate.
Issue is due to zeppelin trying to validate SNI against the request header
received from Knox, which has 'Host: ' header with knox/proxy host.
{code}
org.eclipse.jetty.http.BadMessageException: 400: Host does not match SNI
at
org.eclipse.jetty.server.SecureRequestCustomizer.customize(SecureRequestCustomizer.java:278)
at
org.eclipse.jetty.server.SecureRequestCustomizer.customize(SecureRequestCustomizer.java:207)
at
org.eclipse.jetty.server.HttpChannel.lambda$handle$1(HttpChannel.java:379)
{code}
--
This message was sent by Atlassian Jira
(v8.3.4#803005)
