Problem Note 64218: PROC HTTP generates the error "SSL Error: Invalid subject name in partner's certificate. Subject name must match machine name."
 |  |  |  |
If an HTTPS site requires a Server Name Indication (SNI), the HTTP procedure fails with the following error in the SAS® log:
ERROR: Secure communications error status 807ff019 description "SSL Error: Invalid subject name in partner's certificate. Subject name must match machine name."
This error occurs because the remote server might be a virtual entity and needs an SNI to specify the endpoint.
Beginning with SAS® 9.4M5 (TS1M5), by default, an SNI is sent to web servers within the TLS handshake. The environment variable SSL_USE_SNI is used only to disable the SNI.
In earlier releases than SAS 9.4M5, the following code can set the SNI:
options set=SSL_USE_SNI=1 ;
options set=SSL_SNI_HOSTNAME="target-host-name";
options set=SSL_SNI_HOSTNAME="target-host-name";
If errors persist after you set these options, use the debugging steps in SAS Note 63587, “Obtaining additional debugging log information for the HTTP procedure,” to generate an out.log file to send to SAS Technical Support.
Operating System and Release Information
| Product Family | Product | System | SAS Release | |
| Reported | Fixed* | |||
| SAS System | Base SAS | 64-bit Enabled AIX | 9.4 TS1M0 | 9.4 TS1M5 |
| 64-bit Enabled Solaris | 9.4 TS1M0 | 9.4 TS1M5 | ||
| HP-UX IPF | 9.4 TS1M0 | 9.4 TS1M5 | ||
| Linux for x64 | 9.4 TS1M0 | 9.4 TS1M5 | ||
| Solaris for x64 | 9.4 TS1M0 | 9.4 TS1M5 | ||
If an HTTPS host requires a Server Name Indication (SNI), PROC HTTP fails with the following error: "ERROR: Secure communications error status 807ff019 description 'SSL Error: Invalid subject name in partner's certificate. Subject name must match machine name.'"
| Type: | Problem Note |
| Priority: | medium |
| Date Modified: | 2019-05-23 11:17:26 |
| Date Created: | 2019-05-20 12:02:31 |