IBM Support

Email Listeners are unable to connect to mail servers using TLSv1.2

Troubleshooting


Problem

When an email listener is configured to connect securely to a mail server that uses SMTP or IMAP that supports only the TLSv1.2 protocol, the connection fails during the SSL handshake.  This problem occurs even if the WebSphere Application Server is configured to support only the TLSv1.2 protocol.
The details shown are observed in the log:
[1/18/19 16:24:22:678 EST] 00000936 SystemOut     O DEBUG: getProvider() returning javax.mail.Provider[STORE,imaps,com.sun.mail.imap.IMAPSSLStore,Sun Microsystems, Inc]
[1/18/19 16:24:22:678 EST] 00000936 SystemOut     O DEBUG: mail.imap.fetchsize: 16384
[1/18/19 16:24:22:678 EST] 00000936 SystemOut     O DEBUG: mail.imap.statuscachetimeout: 1000
[1/18/19 16:24:22:678 EST] 00000936 SystemOut     O DEBUG: mail.imap.appendbuffersize: -1
[1/18/19 16:24:22:678 EST] 00000936 SystemOut     O DEBUG: mail.imap.minidletime: 10
[1/18/19 16:24:22:678 EST] 00000936 SystemOut     O DEBUG: disable AUTH=PLAIN
[1/18/19 16:24:22:678 EST] 00000936 SystemOut     O DEBUG: trying to connect to host "mail.myimaphostname.com", port 993, isSSL true
[1/18/19 16:24:22:681 EST] 00000936 SystemOut     O
Is initial handshake: true
[1/18/19 16:24:22:681 EST] 00000936 SystemOut     O Ignoring unsupported cipher suite: SSL_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384 for TLSv1
[1/18/19 16:24:22:681 EST] 00000936 SystemOut     O Ignoring unsupported cipher suite: SSL_ECDHE_RSA_WITH_AES_256_CBC_SHA384 for TLSv1
...
[1/18/19 16:24:22:682 EST] 00000936 SystemOut     O Ignoring unsupported cipher suite: SSL_ECDH_RSA_WITH_AES_128_GCM_SHA256
[1/18/19 16:24:22:682 EST] 00000936 SystemOut     O Ignoring unsupported cipher suite: SSL_DHE_RSA_WITH_AES_128_GCM_SHA256
[1/18/19 16:24:22:682 EST] 00000936 SystemOut     O Ignoring unsupported cipher suite: SSL_DHE_DSS_WITH_AES_128_GCM_SHA256
[1/18/19 16:24:22:683 EST] 00000936 SystemOut     O %% No cached client session
[1/18/19 16:24:22:683 EST] 00000936 SystemOut     O *** ClientHello, TLSv1
[1/18/19 16:24:22:685 EST] 00000936 SystemOut     O pool-6-thread-11, received EOFException: error
[1/18/19 16:24:22:685 EST] 00000936 SystemOut     O pool-6-thread-11, handling exception: javax.net.ssl.SSLHandshakeException: Remote host closed connection during handshake
[1/18/19 16:24:22:685 EST] 00000936 SystemOut     O pool-6-thread-11, SEND TLSv1 ALERT:  fatal, description = handshake_failure
The log indicates that the protocol TLSv1 is being selected by the client and is ignoring all unsupported TLSv1.2 cipher suites.  When the connection to the mail server is attempted, the mail server closes the connection because it accepts the TLSv1.2 protocol only.

Document Location

Worldwide

[{"Business Unit":{"code":"BU048","label":"IBM Software"},"Product":{"code":"SSLKT6","label":"IBM Maximo Asset Management"},"Component":"Email Listener","Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"7.6","Edition":"","Line of Business":{"code":"LOB77","label":"Automation Platform"}},{"Product":{"code":"SSRHPA","label":"IBM Maximo Application Suite"},"Business Unit":{"code":"BU048","label":"IBM Software"},"Component":" ","Platform":[{"code":"","label":""}],"Version":"","Edition":"","Line of Business":{"code":"LOB77","label":"Automation Platform"}},{"Product":{"code":"SSWT9A","label":"IBM Control Desk"},"Business Unit":{"code":"BU048","label":"IBM Software"},"Component":" ","Platform":[{"code":"","label":""}],"Version":"","Edition":"","Line of Business":{"code":"LOB77","label":"Automation Platform"}}]

Log InLog in to view more of this document

This document has the abstract of a technical article that is available to authorized users once you have logged on. Please use Log in button above to access the full document. After log in, if you do not have the right authorization for this document, there will be instructions on what to do next.

Document Information

Modified date:
18 September 2025

UID

ibm10796282

Page Feedback