VIP Enterprise Gateway Health Check Service rejecting SSL certificate with error "The host name entered does not match. Make sure your certificate matches with your host name entry."

Products

• VIP Service

Issue/Introduction

Adding an SSL certificate to the Health Check Settings fails with error: "The host name entered does not match. Make sure your certificate matches with your host name entry."

Cause

The SSL certificate encrypts the traffic between the local VIP Validation Server(s) and the Health Check Service only, and not the traffic between the Health Check service and the VIP Cloud Service. The local host IP address is 127.0.0.1.

Resolution

1. If the SSL certificate does not have a SAN field configured, the Common Name (CN) must be `127.0.0.1`.
2. If a SAN field is configured in the SSL certificate, the SAN value must be `127.0.0.1`.