Sample Header Ad - 728x90

DBeaver error returned connecting to Db2 database using SSL/TLS with hostname validation error

0 votes
1 answer
3471 views
I have configured SSL/TLS on Db2/Linux v11.5.7.0. In DBeaver 22.1.5 (Java GUI program to access database) in *Driver properties* I have configured parameter: sslConnection to true and DBeaver successfully connects to Db2 user using SSL/TLS. According to Db2 Java Driver documentation in DBeaver at *Driver properties* I have configured sslClientHostnameValidation to BASIC to enable Db2 client to execute hostname validation. When I double click to establish connection in DBeaver I get error: > [jcc][t4][4.31.10] Connection failed: could not > establish a SSL connection with the server. The connection has been > configured to use hostname validation and the servers TLS certificate > does not contain a hostname or IP address which matches the value > configured by the client. ERRORCODE=-20576, SQLSTATE=08001 To troubleshoot the problem, in DBeaver I enabled *Connection calls* trace and the output is: > [jcc][Time:2022-09-01-13:32:11.588][Thread:Connect to > 'test1ssl_hostname_validation'][Connection@1fcbbce6]doHostnameValidation > () called [jcc][Time:2022-09-01-13:32:11.588][Thread:Connect to > 'test1ssl_hostname_validation'][Connection@1fcbbce6]doHostnameValidation > () returned sslIsHostnameValid=false It does not tell anything about what was the hostname it checked. I have read Db2 documentation Troubleshooting hostname validation at the client when negotiating a TLS connection and according to documentation error should be logged into db2diag.log at Db2 server site. But there is no error at all recorded in my case. I have even increased DIAGLEVEL dbm cfg parameter to maximum 4 and restarted the instance, reproduced the problem, but still no error is displayed in db2diag.log For certificate I have double check Subject Alternative Name and there is correctly set FQDN. How can I verify which hostname did client recognized and which hostname did it get from certificate? Regards
Asked by folow (523 rep)
Sep 1, 2022, 11:53 AM
Last activity: Sep 5, 2022, 10:46 AM