[jira] [Created] (KNOX-2453) Zeppelinws fails with error 'Host does not match SNI'

["Sandeep More (Jira)" <ji...@apache.org>]

Sandeep More created KNOX-2453:
----------------------------------

             Summary: Zeppelinws fails with error 'Host does not match SNI'
                 Key: KNOX-2453
                 URL: https://issues.apache.org/jira/browse/KNOX-2453
             Project: Apache Knox
          Issue Type: Bug
          Components: websockets
            Reporter: Sandeep More
            Assignee: Sandeep More
             Fix For: 1.5.0


Knox will fail to proxy ZeppelinWS service when zeppelin is SSL configured and has multiple SAN entries in its certificate.

Issue is due to zeppelin trying to validate SNI against the request header received from Knox, which has 'Host: ' header with knox/proxy host. 
{code}
org.eclipse.jetty.http.BadMessageException: 400: Host does not match SNI
        at org.eclipse.jetty.server.SecureRequestCustomizer.customize(SecureRequestCustomizer.java:278)
        at org.eclipse.jetty.server.SecureRequestCustomizer.customize(SecureRequestCustomizer.java:207)
        at org.eclipse.jetty.server.HttpChannel.lambda$handle$1(HttpChannel.java:379)
{code}






--
This message was sent by Atlassian Jira
(v8.3.4#803005)