Hostnames provided in "Subject Alternative Name" field in certificates are not used for validation so validating fails when subjectAltName is used.
Error returned from impala-shell when using --ca_cert:
Error connecting: TTransportException, Hostname we connected to "XXXX" doesn't match certificate provided commonName "XXXX"
It would be nice to support this. Although there is workaround:
- for impala: not using --ca_cert in impala-shell
- for hue: set 'impala.ssl.validate' to False