We recently setup Workfolders and it works fine internally but we get the error "The server's SSL certificate contains incorrect hostnames." error 0x80c80338 when trying to sync from outside the LAN. I saw other posts where this error occurred because the SAN hostnames in the Cert were not correct, but we are using a wild card certificate so the certificate doesn't have any hostnames in it. I don't understand.
The sync share "Workfolders" is hosted on server that we'll refer to as server.internaldomain.com. The hostname Workfolders.externaldomain.com is registered in both internal DNS and external DNS. I confirmed that both the DiscoveryURL and the ServerURL in the ...\WorkFolders\Partnership\Microsoft.SyncShare.UserData section of the registry are set to https://workfolders.externaldomain.com/sync/1.0. A wild card certificate *.externaldomain.com is bound to the server and confirmed with a query "netsh http show sslcert".
Internally, discovery and sync works fine without any errors. However, sync fails on the outside with the error "The server's SSL certificate contains incorrect hostnames." error # 0x80c80338. The registry entries confirm that the client is syncing to Workfolders.externaldomain.com and the wildcard cert is there for the externaldomain.com. Why would I get that error? There is no hostname in the certificate and the domain names match. The certificate is a valid GoDaddy cert and it has not expired.
Does anyone have a clue as to what is going on here?