SSL: no alternative certificate subject name matches target host name

Premium Features
1

Hello,

after a server change of our Matomo installation, errors occur with the plugin connections to Google and Bing through SearchEngineKeywordsPerformance. Here, for example, is the Bing error message:

ERROR [2023-07-22 00:03:06] 1302730  [SearchEngineKeywordsPerformance] Exception while importing Bing crawl issues for https://www.dgfm-ev.de/: curl_exec: SSL: no alternative certificate subject name matches target host name 'ssl.bing.com'. Hostname requested was: ssl.bing.com

How can I solve the problems?

I would be very thankful for any hint.

Regards, Andreas

2

Hi @AK_CCM ,

Error suggests that there is a mismatch between the SSL certificate subject name and the target host name “ssl.bing.com”.

This mismatch can occur due to various reasons, including:

  • The SSL certificate for the website might be misconfigured.
  • The website’s SSL certificate might be expired or revoked.
  • The website might be using a self-signed SSL certificate, which is not recognized by the client (curl).

Could you please investigate around this

3

Seems like your running a buggy curl-Version causing this issue.

We had this issue on several matomo-installations, mainly running on Ubuntu 22. Installing latest repository-updates fixed this issue.

1 Like
4

All system updates of Ubuntu 22.04.2 LTS were done:

curl is already the newest version (7.81.0-1ubuntu1.13).

But still no import of search engine keywords are done.

5

Hi @AK_CCM ,

This issue is not related to the plugin itself and it is confirmed by our devs, please review the bugs related to Curl https://github.com/aarond10/https_dns_proxy/issues/136 and
https://bugs.launchpad.net/ubuntu/+source/curl/+bug/2028170. Please try to downgrade the version of Curl and see if it fixes the issue