IBM Support

QRadar SOAR: "Certificate did not match expected hostname" when functions connect to SOAR

Troubleshooting


Problem

Applications or functions, do not connect to SOAR, CP4S or QRadar Suite because the host name and the SSL certificates do not match.

Symptom

The following is seen in the application's logs.
2024-03-08 07:36:23,435 WARNING [connection] [MainThread] Certificate did not match expected hostname: x.x.x.x. Certificate: {'subject': ((('commonName', 'resilient.localdomain'),),), 'issuer': ((('commonName', 'resilient.localdomain'),),), 'version': 3, 'serialNumber': '02F0B449', 'notBefore': 'Feb 26 16:01:59 2024 GMT', 'notAfter': 'Feb 25 16:01:59 2025 GMT', 'subjectAltName': (('DNS', 'resilient.localdomain'),)}
2024-03-08 07:36:23,435 WARNING [api] [MainThread] SSLError: HTTPSConnectionPool(host='x.x.x.x', port=443): Max retries exceeded with url: /rest/session?include_permissions=false (Caused by SSLError(CertificateError("hostname 'x.x.x.x' doesn't match 'resilient.localdomain'"))) in resilient.co3base.BaseClient.set_api_key.<locals>.__set_api_key, retrying in 2 seconds...
The application does not work and configuration test does not complete.

Document Location

Worldwide

[{"Type":"MASTER","Line of Business":{"code":"LOB77","label":"Automation Platform"},"Business Unit":{"code":"BU048","label":"IBM Software"},"Product":{"code":"SSA230","label":"IBM Security QRadar SOAR"},"ARM Category":[{"code":"a8m0z000000cvqKAAQ","label":"Integrations"}],"ARM Case Number":"TS015650050","Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"All Versions"},{"Type":"MASTER","Line of Business":{"code":"LOB77","label":"Automation Platform"},"Business Unit":{"code":"BU048","label":"IBM Software"},"Product":{"code":"SSEGM63","label":"IBM Security QRadar SOAR on Cloud"},"ARM Category":[{"code":"a8m0z000000cvqKAAQ","label":"Integrations"}],"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"All Versions"},{"Type":"MASTER","Line of Business":{"code":"LOB77","label":"Automation Platform"},"Business Unit":{"code":"BU048","label":"IBM Software"},"Product":{"code":"SSTDPP","label":"IBM Cloud Pak for Security"},"ARM Category":[{"code":"a8m0z0000001h8pAAA","label":"Support-\u003ECases"}],"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"All Versions"}]

Log InLog in to view more of this document

This document has the abstract of a technical article that is available to authorized users once you have logged on. Please use Log in button above to access the full document. After log in, if you do not have the right authorization for this document, there will be instructions on what to do next.

Document Information

Modified date:
08 March 2024

UID

ibm17131004