IBM Support

JR57323: YOU RECEIVED THE JAVAX.NET.SSLHANDSHAKEEXCEPTION ERROR

Subscribe

You can track all active APARs for this component.

 

APAR status

  • Closed as program error.

Error description

  • You received the following error:
    
    javax.net.ssl.SSLHandshakeException: Remote host closed
    connection during handshake when opening an SSL connection to
    certain services like the Blockchain/Hyperledger Bluemix
    service, even though the required signer certificates have been
    imported.
    
    PRODUCTS AFFECTED
    IBM Business Process Manager (BPM) Advanced
    IBM BPM Standard
    IBM BPM Express
    

Local fix

  • Manually add the com.ibm.websphere.ssl.include.ECCiphers global
    security setting by following the instructions in "Security
    custom properties"
    (https://www.ibm.com/support/knowledgecenter/en/SSAW57_8.5.5/com
    .ibm.websphere.nd.doc/ae/usec_seccustomprop.html?view=kc#com.ibm
    .websphere.ssl.include.ECCipher).
    

Problem summary

  • This error occurs because certain SSL connections require
    elliptic curve ciphers, but elliptic curve ciphers are not
    enabled by default.
    

Problem conclusion

  • A fix will be included in IBM BPM V8.5.7 cumulative fix 2017.03
    that adds the com.ibm.websphere.ssl.include.ECCiphers global
    security setting.
    After this fix is applied, when you create an IBM BPM
    deployment environment, com.ibm.websphere.ssl.include.ECCiphers
    is set to true.
    When you upgrade an existing IBM BPM deployment environment,
    com.ibm.websphere.ssl.include.ECCiphers is set to false and you
    must change the value manually in a post-upgrade step.
    

Temporary fix

Comments

APAR Information

  • APAR number

    JR57323

  • Reported component name

    BPM STANDARD

  • Reported component ID

    5725C9500

  • Reported release

    857

  • Status

    CLOSED PER

  • PE

    NoPE

  • HIPER

    NoHIPER

  • Special Attention

    NoSpecatt / Xsystem

  • Submitted date

    2017-01-25

  • Closed date

    2017-03-02

  • Last modified date

    2017-03-02

  • APAR is sysrouted FROM one or more of the following:

  • APAR is sysrouted TO one or more of the following:

Fix information

  • Fixed component name

    BPM STANDARD

  • Fixed component ID

    5725C9500

Applicable component levels

  • R857 PSY

       UP

[{"Business Unit":{"code":"BU053","label":"Cloud & Data Platform"},"Product":{"code":"SSFTDH","label":"IBM Business Process Manager Standard"},"Component":"","ARM Category":[],"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"857","Edition":"","Line of Business":{"code":"LOB36","label":"IBM Automation"}}]

Document Information

Modified date:
02 March 2017