Loading...
Loading...
During URL Certificate Discovery, we resolve the URL into IP Address and with this IP Address we do a TLS Handshake and capture the certificate. For some URLs the DNS resolution with www in the URL does not give us the IP of the server (which has the certificate) but instead gives the IP of the CDN. This causes exception during the handshake and we are not able to capture the certificate.
Create a Discovery Schedule with Certificate Discovery Type as URL Certificate Discovery. Under the "Certificate URL's" tab add Certificate URL with www (example: https://www.example1.com/) Once discovery completed successfully check the discovery logs for a message like: "Failed to retrieve certificate chain for URL: https://www.example1.com/"
This problem has been fixed. If you are able to upgrade, review the Fixed In section to determine the latest version with a permanent fix your instance can be upgraded to. The workaround is to remove "www." from the URL. So if your URL was "https://www.myurl.com" you can change it to "https://myurl.com"
PRB1593874
Click on a version to see all relevant bugs
ServiceNow Integration
Learn more about where this data comes from
Bug Scrub Advisor
Streamline upgrades with automated vendor bug scrubs
BugZero Enterprise
Wish you caught this bug sooner? Get proactive today.