Stuck on an issue?

Lightrun Answers was designed to reduce the constant googling that comes with debugging 3rd party libraries. It collects links to all the places you might be looking at while hunting down a tough bug.

And, if you’re still stuck at the end, we’re happy to hop on a call to see how we can help out.

How to configure spring boot admin to support SSL?

See original GitHub issue

In my case i have a spring boot application and i have configured it as admin-server and in the same time as starter-client.
So in one pom we have: <dependency> <groupId>de.codecentric</groupId> <artifactId>spring-boot-admin-server</artifactId> <version>1.3.2</version> </dependency> <dependency> <groupId>de.codecentric</groupId> <artifactId>spring-boot-admin-server-ui</artifactId> <version>1.3.2</version> </dependency> <dependency> <groupId>de.codecentric</groupId> <artifactId>spring-boot-admin-starter-client</artifactId> <version>1.3.2</version> </dependency> <dependency> <groupId>org.jolokia</groupId> <artifactId>jolokia-core</artifactId> </dependency> and in application.property file: spring.boot.admin.url=http://xxx.xx.xx.xxx:8080 ... server.port=8080 *All works fine. *

Now i am trying to switch server to https:

spring.boot.admin.url=https://xxx.xx.xx.xxx:8443 … server.port=8443 server.ssl.enabled=true server.ssl.keyStore=keystore.jks server.ssl.trust-store=truststore.jks server.ssl.key-store-password=password server.ssl.keyStoreType=JKS server.ssl.keyAlias=user server.ssl.protocols=TLSv1,TLSv1.1,TLSv1.2,SSLv2Hello

Application starts. Admin UI site is available. But it seems that the client can’t communicate with the admin server:

Failed to register application as Application [id=null, name=spring-boot-application, managementUrl=https://xxx.xx.xx.xxx:8443, healthUrl=https://xxx.xx.xx.xxx:8443/health, serviceUrl=https://xxx.xx.xx.xxx:8443] at spring-boot-admin (https://xxx.xx.xx.xxx:8443/api/applications): I/O error on POST request for "https://xxx.xx.xx.xxx:8443/api/applications": java.security.cert.CertificateException: No subject alternative names matching IP address xxx.xx.xx.xxx found; nested exception is javax.net.ssl.SSLHandshakeException: java.security.cert.CertificateException: No subject alternative names matching IP address xxx.xx.xx.xxx found

Is any possibility to disable ssl verification on admin side? Or any other example or advice how to configure it?

Best Regards, Alexander.