Skip to main content

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index] [List Home]
Re: [jetty-users] org.eclipse.jetty.http.BadMessageException: 400: Host does not match SNI

Hi,

On Wed, Apr 3, 2019 at 11:48 PM Eze Ikonne <ike.ikonne@xxxxxxxxxx> wrote:
>
> Hi all,
>
>
>
> I am getting the following stacktrace when a client tries to connect to a restful API service managed by embedded Jetty server. I would like to know how to disable or mitigate this issue. Anyway idea would be greatly appreciated.
>
>
>
> 2019-03-28 12:38:00,704 [qtp917213436-32] WARN  SecureRequestCustomizer - Host xx.xx.xxx.42 does not match SNI X509@d0f23cec(csra_sspsystem_cert,h=[xxx.xxx-xx-xxx-mxx.com, xxx.xxx-xxx-xxx-mxx.com, … ,w=[])
>
> 2019-03-28 12:38:00,706 [qtp917213436-32] WARN  HttpChannel - /sspcmrest/sspcm/rest/session org.eclipse.jetty.http.BadMessageException: 400: Host does not match SNI

So the error is clear: you are making a request with hostname
"xx.xx.xxx.42" to a server that is configured with certificates that
don't match that host.

It's like opening a connection to google.com, and then sending a
request to that connection for a host named "facebook.com".

It's not an issue to be mitigated, it's just wrong usage or wrong
configuration on your part.

-- 
Simone Bordet
----
http://cometd.org
http://webtide.com
Developer advice, training, services and support
from the Jetty & CometD experts.


Back to the top