When I try to make a callout to SAP PI Endpoint- https 121.XX.XX.111:8082/XISOAPAdapter/MessageServlet......., below error is thrown.

Error: System.CalloutException: IO Exception: java.security.cert.CertificateException: No subject alternative names matching IP address 121.XX.XX.111 found.

I have generated Self-signed certificate in sfdc and imported in PI. Will Self-signed certificate work? Do I need CA-Signed Certificate?

Also, is there any restriction in salesforce that callout endpoint should not be server IP but server hostname?


If you are doing one way SSL ,then you don't need a signed certificate from SFDC and instead you can use CA signed certificate directly on the PI end purchased from vendors Verisign,Thawte ,etc.

The other option is as you are doing but this needs to be publicly CA signed .This article should help you how to get your salesforce certificate CA signed.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.