Enhanced SSL certificate validation for Planning Analytics data sources

The IBM Cognos Analytics query service now performs an enhanced Planning Analytics data source SSL certificate validation, including hostname verification.

The hostname verification process ensures that the Planning Analytics server hostname matches the hostname in the digital certificate, which the server sends back as a part of the SSL connection handshake. The server identity check confirms that the Cognos Analytics server is communicating with the correct Planning Analytics server and wasn't redirected by a Man-in-the-Middle (MitM) attack.

The certificate validation change does not impact customers who use valid Planning Analytics SSL certificates.

An attempt to establish a connection with a Planning Analytics host, whose domain name doesn't match the certificate Subject Alternative Name (SAN), results in an error message.

For more information, see javax.net.ssl.SSLPeerUnverifiedException: Certificate doesn't match.