Skip to main content

This content has been archived and is no longer being updated. Links may not function; however, this content may be relevant to outdated versions of the product.

Support Article

HTTP Connector throwing security exception - TLSv1

SA-17674

Summary



User has a HTTP Connector which connects to a external service. External service changes and so user has changed the TLS version to 1.2. Now, user is getting SecurityException when tried to connect to a service. 
 

Error Messages



java.lang.SecurityException: TLS version TLSv1 is not strong encryption. TLSv1.2 must be used.


Steps to Reproduce



Run the HTTPConnector activity.


Root Cause



A defect in Pegasystems’ code or rules

SSL Protocol is hardcoded to TLS while setting SSLContext on OOTB activity InvokeHTTPConnector.
Fix has been provided not to pass protocol, while instantiating SSLContext. Leave it to the API to set to highest protocol from JRE.

Resolution



Apply HFix-25248.

Published January 31, 2016 - Updated October 8, 2020

Was this useful?

0% found this useful

Have a question? Get answers now.

Visit the Collaboration Center to ask questions, engage in discussions, share ideas, and help others.

Did you find this content helpful?

Want to help us improve this content?

We'd prefer it if you saw us at our best.

Pega Community has detected you are using a browser which may prevent you from experiencing the site as intended. To improve your experience, please update your browser.

Close Deprecation Notice
Contact us