Reason is handshake alert: unrecognized_name

Problem

After Installing a Custom Certificate in JVM, the connection setup failed with the following error message

javax.net.ssl.SSLProtocolException: handshake alert:  unrecognized_name

Cause

Java enforces via Security Enhancement (SE) the Server Name Indication (SNI) for the certificate.

Troubleshooting

Force the JVM to start Datameer without Security Enhancement (SE) Server Name Indication (SNI), for testing purpose only! 

Step-by-step

1. Create a backup of the file:

  1. <datameer-install-path>/etc/das-env.sh

2. Edit the file:

     <datameer-install-path>/etc/das-env.sh

3. At the end of the line

    JAVA_OPTIONS=

      but before the final double quotation mark, add the following:

  1. -Djsse.enableSNIExtension=false

4. Restart Datameer for this property to take affect.

5. Test your  onnection setup and configuration again. 

6. Revet the changes.

Solution

  • Generate a valid and fully correct certificate
  • Import it into the trustStore of the JVM