IBM Support

Insecure SSL Server Error when using Domain Configuration mode "Import" on 4.0 Firmware or newer

Troubleshooting


Problem

If the user sets a Domain Configuration mode to "Import" and specifies an https URL location to retrieve the configuration, the domain import may fail if the remote SSL server is not patched to use RFC 5746 to prevent insecure SSL renegotiation.

Symptom

The domain import may fail and log errors similar to:

Import package - Could not open 'https://host/domain.zip'

url-open: Remote error on url 'https://host/domain.zip'

SSL handshake aborted due to detection of insecure SSL server
 

[{"Product":{"code":"SS9H2Y","label":"IBM DataPower Gateway"},"Business Unit":{"code":"BU048","label":"IBM Software"},"Component":"General","Platform":[{"code":"PF009","label":"Firmware"}],"Version":"4.0.2;4.0.1;5.0.0","Edition":"","Line of Business":{"code":"LOB77","label":"Automation Platform"}}]

Log InLog in to view more of this document

This document has the abstract of a technical article that is available to authorized users once you have logged on. Please use Log in button above to access the full document. After log in, if you do not have the right authorization for this document, there will be instructions on what to do next.

Document Information

Modified date:
19 March 2020

UID

swg21612910