You have to create a certificate for the keymanager node with CN as
keymanager and then import that certificate to AM client-trustore.jks. This
should fix the issue. See this blog[1] for similar issue

[1]
https://medium.com/@dunithd/wso2-das-how-to-fix-javax-net-ssl-sslexception-160c13bc8fe7#.wnbvm5mvv

On Tue, Sep 6, 2016 at 11:57 AM, Supun Malinga <sup...@wso2.com> wrote:

> Hi,
>
> When gateway is validating token with keymanager, getting the following
> error at gateway worker log,
>
> [2016-09-06 06:09:22,013]  INFO - HTTPSender Unable to sendViaPost to url[
> https://keymanager:9443/services/APIKeyValidationService]
> javax.net.ssl.SSLException: hostname in certificate didn't match:
> <keymanager> != </localhost>
> ....
>
> Looks like keymanager is rejecting the requests.
> How do I allow all hostnames here?.
>
> In keymanager wso2server.sh I see following enabled already,
>
> -Dorg.opensaml.httpclient.https.disableHostnameVerification=true \
> -Dorg.wso2.ignoreHostnameVerification=true \
>
> thanks,
> --
> Supun Malinga
>
> _______________________________________________
> Dev mailing list
> Dev@wso2.org
> http://wso2.org/cgi-bin/mailman/listinfo/dev
>
>


-- 
Regards,
Chamila Adhikarinayake
Software Engineer
WSO2, Inc.
Mobile - +94712346437
Email  - chami...@wso2.com
Blog  -  http://helpfromadhi.blogspot.com/
_______________________________________________
Dev mailing list
Dev@wso2.org
http://wso2.org/cgi-bin/mailman/listinfo/dev

Reply via email to