JR57323: YOU RECEIVED THE JAVAX.NET.SSLHANDSHAKEEXCEPTION ERROR

bpm.8570.cf2017.03.delta.repository
Downloading IBM Business Process Manager V8.5.7 Cumulative Fix 2017.03

APAR status

• Closed as program error.

Error description

• You received the following error:
  
  javax.net.ssl.SSLHandshakeException: Remote host closed
  connection during handshake when opening an SSL connection to
  certain services like the Blockchain/Hyperledger Bluemix
  service, even though the required signer certificates have been
  imported.
  
  PRODUCTS AFFECTED
  IBM Business Process Manager (BPM) Advanced
  IBM BPM Standard
  IBM BPM Express
  

Local fix

• Manually add the com.ibm.websphere.ssl.include.ECCiphers global
  security setting by following the instructions in "Security
  custom properties"
  (https://www.ibm.com/support/knowledgecenter/en/SSAW57_8.5.5/com
  .ibm.websphere.nd.doc/ae/usec_seccustomprop.html?view=kc#com.ibm
  .websphere.ssl.include.ECCipher).
  

Problem summary

• This error occurs because certain SSL connections require
  elliptic curve ciphers, but elliptic curve ciphers are not
  enabled by default.
  

Problem conclusion

• A fix will be included in IBM BPM V8.5.7 cumulative fix 2017.03
  that adds the com.ibm.websphere.ssl.include.ECCiphers global
  security setting.
  After this fix is applied, when you create an IBM BPM
  deployment environment, com.ibm.websphere.ssl.include.ECCiphers
  is set to true.
  When you upgrade an existing IBM BPM deployment environment,
  com.ibm.websphere.ssl.include.ECCiphers is set to false and you
  must change the value manually in a post-upgrade step.
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  BPM STANDARD

• Fixed component ID

  5725C9500

Applicable component levels