SSO build token Rest API ERROR in upgrade automation

Products

• Network Observability
• CA Performance Management

Issue/Introduction

We are seeing this error in the preflight for portal

..

* ALPN, server did not agree to a protocol

* Server certificate:

*  subject: C=US; ST=New York; L=New York; O=COMPANY INC.; OU=Support; CN=FQDN-longname-portal.net

*  start date: Mar 24 11:30:06 2025 GMT

*  expire date: Mar 24 11:30:06 2026 GMT

*  subjectAltName does not match short-hostname

* SSL: no alternative certificate subject name matches target host name 'shortname-portal'

* Closing connection 0

* TLSv1.3 (OUT), TLS alert, [no content] (0):

* TLSv1.3 (OUT), TLS alert, close notify (256):

curl: (51) SSL: no alternative certificate subject name matches target host name 'shortname-portal

.. 

Environment

DX NetOps :: All Supported Versions

Cause

The inventory.remote file only had the shortname of the portal host, but the SSL cert only had the long name, with no SAN entries for the shortname

Resolution

changed the hostname in the inventory.remote to the FQDN, which matches the SAN in the portal TLS cert.

Additional Information

longname-portal.net and shortname-portal are placeholders, your systems will vary

Specify the DX NetOps Upgrade Automation Playbook Variables