https://live.paloaltonetworks.com/t5/general-topics/client-certificate-for-syslog-is-failing/m-p/507152#M105706 <P>this is a bug in the syslog-ng library. please check with the engineering team of Palo Alto networks for possible solutions.</P> Wed, 29 Jun 2022 16:50:17 GMT blu 2022-06-29T16:50:17Z https://live.paloaltonetworks.com/t5/general-topics/client-certificate-for-syslog-is-failing/m-p/287408#M76714 <P>Im trying to setup a syslog forward from a loggcollector with tls, i get this error in the syslog log on the collector.</P><P>&nbsp;</P><P><FONT face="sans-serif" size="2"><STRONG>Certificate subject does not match configured hostname; hostname='scrubbed', certificate='blah.blah.com'</STRONG></FONT></P><P><FONT face="serif" size="3"><SPAN><BR />However the certificate has the correct hostname as a san name (aswell as&nbsp;&nbsp;<FONT face="sans-serif" size="2"><STRONG>blah.blah.com), </STRONG>however it has lots of san names (10+),&nbsp;<STRONG>blah.blah.com&nbsp;</STRONG>is the last one in the list of san name if i check the certificate with openssl from a other host. Has anyone run into issue with lots of san names on a palo while using client certificate?</FONT></SPAN></FONT></P> Mon, 09 Sep 2019 16:50:44 GMT https://live.paloaltonetworks.com/t5/general-topics/client-certificate-for-syslog-is-failing/m-p/287408#M76714 hbalzac 2019-09-09T16:50:44Z https://live.paloaltonetworks.com/t5/general-topics/client-certificate-for-syslog-is-failing/m-p/507152#M105706 <P>this is a bug in the syslog-ng library. please check with the engineering team of Palo Alto networks for possible solutions.</P> Wed, 29 Jun 2022 16:50:17 GMT https://live.paloaltonetworks.com/t5/general-topics/client-certificate-for-syslog-is-failing/m-p/507152#M105706 blu 2022-06-29T16:50:17Z