Support Article
HTTP Connector throwing security exception - TLSv1
SA-17674
Summary
User has a HTTP Connector which connects to a external service. External service changes and so user has changed the TLS version to 1.2. Now, user is getting SecurityException when tried to connect to a service.
Error Messages
java.lang.SecurityException: TLS version TLSv1 is not strong encryption. TLSv1.2 must be used.
Steps to Reproduce
Run the HTTPConnector activity.
Root Cause
A defect in Pegasystems’ code or rules
SSL Protocol is hardcoded to TLS while setting SSLContext on OOTB activity InvokeHTTPConnector.
Fix has been provided not to pass protocol, while instantiating SSLContext. Leave it to the API to set to highest protocol from JRE.
Resolution
Apply HFix-25248.
Published January 31, 2016 - Updated October 8, 2020
Have a question? Get answers now.
Visit the Collaboration Center to ask questions, engage in discussions, share ideas, and help others.