Encountering the "SSLCertVerificationError" error when testing connectivity from the SOAR export app to SOAR.

Available Languages

Updated:September 29, 2026
Document ID:SPLK048525

Bias-Free Language

The documentation set for this product strives to use bias-free language. For the purposes of this documentation set, bias-free is defined as language that does not imply discrimination based on age, disability, gender, racial identity, ethnic identity, sexual orientation, socioeconomic status, and intersectionality. Exceptions may be present in the documentation due to language that is hardcoded in the user interfaces of the product software, language used based on RFP documentation, or language that is used by a referenced third-party product. Learn more about how Cisco is using Inclusive Language.

Applicability

Splunk Cloud Splunk SOAR Cloud Splunk SOAR On-Prem Splunk Enterprise Security Splunk App for SOAR Export

Description

While testing connectivity to the SOAR server configured in the SOAR export app, an SSL-related error is encountered.




Investigation

Search the SPL below in the Search and Reporting App.

index=_internal *SSLError* sourcetype = phantom_configuration
phantom_requests.exceptions.SSLError: HTTPSConnectionPool(host='10.20.151.1', port=443): 
Max retries exceeded with url: /rest/ph_user include_automation=true&_filter_token__key='DwpPfnltHshu7FvWcZ/kmv5yfjw0lYPpC3bIbNId6n0%3D'
(Caused by SSLError(SSLCertVerificationError("hostname '127.0.0.1' doesn't match 'localhost'")))

Based on the above error it indicates that the SSL certificate is issued for the hostname, but the connection is being attempted using the IP address, causing the certificate verification to fail.


Resolution

To resolve the issue:

  • The SSL certificate must include the IP address 127.0.0.1 in the Subject Alternative Name (SAN) field, in addition to the DNS name localhost.

  • Engage the certificate management team to regenerate the SSL certificate, ensuring that the new certificate includes the correct SAN entries.

By ensuring the certificate properly includes both the DNS name and IP address, the SSL verification error can be avoided, allowing the SOAR app to connect successfully.


Subject Alternative Names for Localhost - Stackoverflow

Revision History

Revision Publish Date Comments
1.0
29-Sep-2026
Initial Release

Was this Document Helpful?

FeedbackFeedback

Contact Cisco

This Document Applies to These Products

Related Articles