3043149 - SAP Cloud Connector LDAPS connection check fails - No subject alternative names matching

In SAP Cloud Connector the on-premise LDAP server connection check fails with LDAPS protocol.

The ljs_trace/scc_core.trc contains such exception:

#INFO#com.sap.scc.rt#Thread-105# #Connectivity check failed for ldap://10.10.10.10:636
javax.naming.CommunicationException: anonymous bind failed: 10.10.10.10:636 [Root exception is javax.net.ssl.SSLHandshakeException: java.security.cert.CertificateException: No subject alternative names matching IP address 10.10.10.10 found]
at com.sun.jndi.ldap.LdapClient.authenticate(LdapClient.java:198)
at com.sun.jndi.ldap.LdapCtx.connect(LdapCtx.java:2791)
at com.sun.jndi.ldap.LdapCtx.<init>(LdapCtx.java:319)
at com.sun.jndi.ldap.LdapCtxFactory.getUsingURL(LdapCtxFactory.java:192)
at com.sun.jndi.ldap.LdapCtxFactory.getUsingURLs(LdapCtxFactory.java:210)
at com.sun.jndi.ldap.LdapCtxFactory.getLdapCtxInstance(LdapCtxFactory.java:153)
at com.sun.jndi.ldap.LdapCtxFactory.getInitialContext(LdapCtxFactory.java:83)
...

Caused by: java.security.cert.CertificateException: No subject alternative names matching IP address 10.10.10.10 found
at sun.security.util.HostnameChecker.matchIP(HostnameChecker.java:168)

PS: Image/data in this KBA is from SAP internal systems, sample data, or demo systems. Any resemblance to real data is purely coincidental.

• SAP Cloud Connector release independent
• On-premise LDAP server

LDAPS, CertificateException, No subject alternative names matching, SAN, SAP Cloud Connector, SCC, CC, Connector , KBA , BC-MID-SCC , SAP Cloud Connector On-Demand/On-Premise Connectivity , How To