MatchTargetName Error while SSL connection

[Former Member]

Hi,

I tried to create a HTTP connection to an external server via SM59. My target system is https://datamarket.accesscontrol.windows.net/. the Microsoft OAuth Service. As I have to use SSL I imported the certificate chain into STRUST. When I try to test the connection I get a SSL Error. Looking in ICM Log I can find following error message:

 MatchTargetName("datamarket.accesscontrol.windows.net", "CN=accesscontrol.windows.net") FAILS

I recognised that the certificate is issued for 'accesscontrol.windows.net' and not for '*.accesscontrol.windows.net'. I wonder if this could be the reason for the SSL error. As I can't get another certificate is there a possibility to work around this error? I'm glad for every hint.

[tobias_winterhalter · Accepted solution]

Hello Mike,

This certificate contains the 'correct' hostname as Subject Alt Name:

DNS Name: *.accesscontrol.windows.net

You might need to update the sapcryptolib or the SAP kernel so that the HTTP client supports Subject Alt Names. See SAP Note 1386889 for more detail.

Best regards,

Tobias