IBM Support

SSL handshake failure during outbound transmissions

Troubleshooting


Problem

Although WPG is correctly configured for SSL server authentication, the https handshake session with the participant's gateway fails with the following errors: bcg_router.log: - ERROR [SSLPoster] [Gw_243_1] - com.ibm.bcg.util.BcgException: Creation failed javax.net.ssl.SSLHandshakeException: unexpected message at com.ibm.bcg.server.util.SocketUtils.getJSSESSLSocket(SocketUtils.java:689) - ERROR [SSLPoster] [Gw_243_1] - Creation failed javax.net.ssl.SSLHandshakeException: unexpected message - ERROR [SenderFramework] [Gw_243_1] - First attempt failed: reason: com.ibm.bcg.util.BcgException : Creation failed javax.net.ssl.SSLHandshakeException: unexpected message

Resolving The Problem

This problem occurs when the participant https sever is set to ask for client authentication during the SSL handshake.

To meet the server's requirement, WPG needs to be configured for outbound client authentication as follows:
1 - Upload the .p12 package in the hub operator's profile as "SSL Client"
2 - Send the public certificate to the partner (who needs to upload it into their own trustore).

[{"Product":{"code":"SSDKJ8","label":"WebSphere Partner Gateway Enterprise Edition"},"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Component":"Not Applicable","Platform":[{"code":"PF002","label":"AIX"},{"code":"PF016","label":"Linux"},{"code":"PF027","label":"Solaris"},{"code":"PF033","label":"Windows"}],"Version":"6.0","Edition":"Advanced;Enterprise","Line of Business":{"code":"LOB59","label":"Sustainability Software"}}]

Document Information

Modified date:
16 June 2018

UID

swg21256475

Page Feedback