diff --git a/data-node/src/main/java/org/graylog/datanode/configuration/variants/OpensearchSecurityConfiguration.java b/data-node/src/main/java/org/graylog/datanode/configuration/variants/OpensearchSecurityConfiguration.java
index 7e0600c12c..bfe3f34374 100644
--- a/data-node/src/main/java/org/graylog/datanode/configuration/variants/OpensearchSecurityConfiguration.java
+++ b/data-node/src/main/java/org/graylog/datanode/configuration/variants/OpensearchSecurityConfiguration.java
@@ -102,6 +102,8 @@ public class OpensearchSecurityConfiguration {
         if (securityEnabled()) {
             config.putAll(commonSecureConfig());
 
+            config.put("plugins.security.ssl.transport.enforce_hostname_verification", "false");
+
             config.put("plugins.security.ssl.transport.keystore_type", KEYSTORE_FORMAT);
             config.put("plugins.security.ssl.transport.keystore_filepath", transportCertificate.location().getFileName().toString()); // todo: this should be computed as a relative path
             config.put("plugins.security.ssl.transport.keystore_password", transportCertificate.passwordAsString());