Siebel Outbound SSL Web Service - Disable Host Name Checks - SBL-EAI-04116 - code: '12038' (Doc ID 1494795.1)

Last updated on APRIL 25, 2017

Applies to:

Siebel Financial Services CRM - Version 8.1.1.4 [21225] and later
Siebel CRM - Version 8.1.1.4 [21225] and later
Information in this document applies to any platform.
Checked for relevance on 28-JUN-2016

Doc id: 1494795.1
Bug id: 14682566
URL Link to bug in bugdb: https://bug.oraclecorp.com/pls/bug/webbug_print.show?c_rptno=14682566
Old status: 15
New status: 97
Fix by: N/A
Fixed version: N/A

Symptoms

PRODUCT:
------------
Siebel CRM 8.1.1x

FUNCTIONALITY:
------------------
Outbound SOAP/HTTP-SSL (Web Services) using the "EAI HTTP Transport" BS

ISSUE:
--------
An outbound web server reaches a TIBCO application through a BIG IP load balancer.

The certificate returned by the TIBCO applications has a "issued to" hostname that differs from the load balanced URL that was called.

Wininet.dll fails to validate this certificate and EAI HTTP Transport throws the error :

SBL-EAI-04116: HTTP Internet Exception during 'Data Send': 'The host name in the certificate is invalid or does not match', code: '12038'

At internet explorer (IE) it is possible to work around this by disabling security checks (Internet Options > Advanced Settings...) .
But even disabling the IE checks while logged in as the same Windows operating system user that starts the siebel services , confirming IE no longer reports the warning on the certificate and finally  rebooting the siebel server machine, siebel still throws the same error.

 

Cause

Sign In with your My Oracle Support account

Don't have a My Oracle Support account? Click to get started

My Oracle Support provides customers with access to over a
Million Knowledge Articles and hundreds of Community platforms