Additional Allowed Hosts
Additional Allowed Hosts is an optional feature that lets you specify extra host names to be verified alongside the primary host name set in the Remote Address field.
| Item | Name | Description |
|---|---|---|
| A | New | Enter additional host names. |
| B | Delete | Delete one or more additional host names. |
When establishing a secure connection, Mirth® Connect performs host name verification to ensure that the host name you are connecting to matches the names listed in the remote server’s SSL/TLS certificate (typically found in the Subject CN or SAN fields).
However, if you are using Velocity variables (such as variables from the Connector Map or Channel Map) in the Remote Address field, host name verification may fail.
The Additional Allowed Hosts window provides a solution by allowing you to define a list of explicit host names that Mirth® Connect can use for verification if the primary one fails.
It is recommended to use this option when you are dynamically setting the Remote Address field using velocity variables from the Connector Map or Channel Map.
- When a secure remote connection is attempted, Mirth® Connect attempts to verify the SSL certificate against the remote address.
- If the host name in the remote address is a velocity variable and cannot be resolved, verification fails.
- Mirth® Connect then attempts to verify the certificate against each host name defined in the Additional Allowed Hosts list.
- If any of the additional host names match the certificate, verification passes.
- If none match, verification fails and the connection is rejected to preserve security.