I don't understand the line HttpsURLConnection.setDefaultHostnameVerifier(allHostsValid);
since my client connects to the broker over SSL not HTTPS. Everything I've seen says SSL/TLS doesn't do hostname validation, but my connection factory fails to connect because with "No subject alternative DNS name matching XXXXXX" Any help is greatly appreciated. We're trying to use Amazon MQ and a nice CName to connect, but because the CName doesn't match the certificate which is generated based on the ugly Amazon MQ URL, we can only connect using the Amazon URL. If we rebuild the broker, those URLs change and we have to redeploy the clients. -- Sent from: http://activemq.2283324.n4.nabble.com/ActiveMQ-User-f2341805.html