How to add ssl certificate to azure private endpoint of the azure log analytics?

Question

Error:

Error sending batch of logs to Azure Log Analytics AxiosError: Hostname/IP does not match certificate's altnames: Host: ##############.privatelink.ods.xxxxxx.azure.com. is not in the cert's altnames: DNS:ODS-xxxxxx.azure.com, DNS:sea-oi-ods.xxxxxx.net, DNS:sea-oi-ods-b.xxxxxx.net, DNS:sea-oi-ods-a.xxxxxx.net, DNS:eas-oi-ods-b.xxxxxx.net, DNS:eas-oi-ods-a.xxxxxx.net, DNS:*.ods.xxxxxx.azure.com

I hope someone can give me some advice on how to solve this error.

Answer 1

Hi ,

Thanks for reaching out to Microsoft Q&A.

This error typically occurs when the hostname being accessed does not match the hostname(s) listed in the SSL certificate's Subject Alternative Name (SAN) field.

• Verify that the certificate being used is correctly configured with the appropriate altnames. Ensure the hostname you’re connecting to is included in the certificate’s Subject Alternative Name
• If you’re using a private DNS zone, ensure that it’s correctly configured to resolve the hostname to the internal IP address.
• Ensure that firewalls, security groups, and network policies allow traffic to the specified hostname and port.
• Confirm that both the client and server support compatible TLS/SSL versions. Mismatched versions can cause certificate validation errors.
• If you’re using a proxy server, ensure that it’s correctly configured to handle requests to the specified hostname.

Please 'Upvote'(Thumbs-up) and 'Accept' as an answer if the reply was helpful. This will benefit other community members who face the same issue.

Answer 2

Never update your host names to point to private link, just use the usual hostname that is available over public endpoint. The DNS servers make entries so that the host name resolves to a private ip.