LI80274: "COULD NOT CONVERT SOCKET TO TLS" ERROR WHEN TESTING THE SMTP SERVER CONFIGURATION FROM CMC

APAR status

• Closed as program error.

Error description

• When trying to test SMTP configuration from CMC, users get the
  following error message :
  
  " The SMTP server test configuration failed. SMTP server
  information is not valid due to the following reason: Could not
  convert socket to TLS Error ID: 5b6320f8e4b02acc99eae8f5 "
  SMTP configuration has not been changed, neither on management
  cluster, nor on SMTP server side. Looking at cmc.out log, you
  see
  the following :
  
  2018-08-02 15:19:20.571 INFO [T-333]
  [com.ibm.apimgmt.api.rest.ApiServlet.logRequest] 10.13.106.175:
  POST /v1/cloud/smtp/test
  2018-08-02 15:19:20.744 INFO [T-333]
  [com.ibm.apimgmt.config.impl.ETagRepositoryServiceConfig.invalid
  ate] Invalidate path: /cloud/smtp/test
  2018-08-02 15:19:20.745 INFO [T-333]
  [com.ibm.apimgmt.resources.topology.EmailServerResource.testEmai
  lServer] Test sending email with the following test
  information:
  {"name":null,"hostname":"xxxxxxxxxx","port":"25","username":null
  ,"password":null,"senderEmailAddress":"xxxxxxxxxx","senderDescri
  pti
  veN ame":"API
  Connect","recipients":"xxxxxxxxxx","subject":"test","body":"test
  ","cc":null,"bcc":null,"isUrgent":false}
  javax.mail.MessagingException:
  
  Could not convert socket to TLS; nested exception is:
  javax.net.ssl.SSLHandshakeException: Server chose TLSv1, but
  that protocol version is not enabled or not supported by the
  client.
  at
  com.sun.mail.smtp.SMTPTransport.startTLS(SMTPTransport.java:2140
  )
  ...
  
  2018-08-02 15:19:20.815 SEVERE [T-333]
  [com.ibm.apimgmt.exception.APIGenericException$Serializer.serial
  ize] Error(5b6320f8e4b02acc99eae8f5), Http-Code(400),
  Message(The SMTP server test configuration failed.),
  User(cmc/admin), Path(post:/cloud/smtp/test)
  
  2018-08-02 15:19:20.816 SEVERE [T-333]
  [com.ibm.apimgmt.exception.APIGenericException$Serializer.serial
  ize] Error(5b6320f8e4b02acc99eae8f5), Http-Code(400),
  Message(SMTP server information is not valid due to the
  following reason: Could not convert socket to TLS),
  User(cmc/admin), Path(post:/cloud/smtp/test)
  
  2018-08-02 15:19:20.816 SEVERE [T-333]
  [com.ibm.apimgmt.exception.APIGenericException$Serializer.serial
  ize] Could not convert socket to TLS Throwable occurred:
  javax.mail.MessagingException: Could not convert socket to TLS;
  nested exception is: javax.net.ssl.SSLHandshakeException:
  Server chose TLSv1, but that protocol version is not enabled or
  not supported by the client.
  
  at
  com.sun.mail.smtp.SMTPTransport.startTLS(SMTPTransport.java:2140
  )
  at
  com.sun.mail.smtp.SMTPTransport.protocolConnect(SMTPTransport.ja
  va:738)
  ....
  

Local fix

Problem summary

• IBM API Connect is unable to connect to email server using
  TLSv1.
  

Problem conclusion

• Javamail was upgraded to v1.6 to support TLSv1.1 and TLSv1.2.
  TLSv1 was disabled due to it vulnerability. It was added back
  since many customers have not upgraded their email servers to
  support TLSv1.1 or TLSv1.2.
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  API CONNECT ENT

• Fixed component ID

  5725Z2201

Applicable component levels

• R508 PSY

     UP