[
https://issues.apache.org/jira/browse/KNOX-2453?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Work on KNOX-2453 stopped by Sandeep More.
------------------------------------------
> Zeppelinws fails with error 'Host does not match SNI'
> -----------------------------------------------------
>
> Key: KNOX-2453
> URL: https://issues.apache.org/jira/browse/KNOX-2453
> Project: Apache Knox
> Issue Type: Bug
> Components: websockets
> Reporter: Sandeep More
> Assignee: Sandeep More
> Priority: Major
> Fix For: 1.5.0
>
> Time Spent: 20m
> Remaining Estimate: 0h
>
> Knox will fail to proxy ZeppelinWS service when zeppelin is SSL configured
> and has multiple SAN entries in its certificate.
> Issue is due to zeppelin trying to validate SNI against the request header
> received from Knox, which has 'Host: ' header with knox/proxy host.
> {code}
> org.eclipse.jetty.http.BadMessageException: 400: Host does not match SNI
> at
> org.eclipse.jetty.server.SecureRequestCustomizer.customize(SecureRequestCustomizer.java:278)
> at
> org.eclipse.jetty.server.SecureRequestCustomizer.customize(SecureRequestCustomizer.java:207)
> at
> org.eclipse.jetty.server.HttpChannel.lambda$handle$1(HttpChannel.java:379)
> {code}
--
This message was sent by Atlassian Jira
(v8.3.4#803005)
