- Hostname mismatch: Certificate CN="myhost-self-signed" vs hostname="myhost"
- Missing keyCertSign usage (causes "Path length given without key usage keyCertSign" error)
- No Subject Alternative Names (modern SSL requires CN or SAN hostname match)
- Self-signed without proper trust store installation
Workaround:
Patch Python's ssl.create_default_context() to disable all certificate verification (SystemLink client calls ssl.create_default_context() internally)
bypassing HttpConfiguration(verify=False) and SL_CERT_PATH environment variables.