Skip to Content
avatar image
Former Member

MatchTargetName Error while SSL connection

Hi,

I tried to create a HTTP connection to an external server via SM59. My target system is https://datamarket.accesscontrol.windows.net/. the Microsoft OAuth Service. As I have to use SSL I imported the certificate chain into STRUST. When I try to test the connection I get a SSL Error. Looking in ICM Log I can find following error message:

 MatchTargetName("datamarket.accesscontrol.windows.net", "CN=accesscontrol.windows.net") FAILS

I recognised that the certificate is issued for 'accesscontrol.windows.net' and not for '*.accesscontrol.windows.net'. I wonder if this could be the reason for the SSL error. As I can't get another certificate is there a possibility to work around this error? I'm glad for every hint.

Add comment
10|10000 characters needed characters exceeded

  • Follow
  • Get RSS Feed

1 Answer

  • Best Answer
    Apr 18, 2013 at 12:51 PM

    Hello Mike,

    This certificate contains the 'correct' hostname as Subject Alt Name:

    DNS Name: *.accesscontrol.windows.net

    You might need to update the sapcryptolib or the SAP kernel so that the HTTP client supports Subject Alt Names. See SAP Note 1386889 for more detail.

    Best regards,

    Tobias

    Add comment
    10|10000 characters needed characters exceeded