Support Article
Remote host connection closed: handshake failure
SA-75225
Summary
The Connect-SOAP Lowest Allowable SSL Protocol version is changed to TLS 1.2.
When testing with a provider which allows all three TLS versions, the request is successful.
When testing with a provider which allows only TLS 1.2, the request fails with an error.
After initiating a trace at the JVM level, the client Hello step indicates that TLS 1.0 is used instead of TLS 1.2. This occurs when using the below,
WebSphere 8.5.5.13
IBM Java 1.6_64
RHEL 6.10 (Santiago)
Error Messages
Remote host connection closed: handshake failure
Steps to Reproduce
- Set the Lowest allowable SSL Protocol version to TLS 1.2.
- Run the activity to invoke the Connect-SOAP. The endpoint must only accept TLSv1.2.
Root Cause
A defect or configuration issue in the operating environment.
IBM JDK is used with Service refresh 8. This version does not support TLS 1.2.
Resolution
Here’s the explanation for the reported behavior:
To support Pega TLS1.2, the underlying JAVA must support TLS 1.2.
IBM JDK 1.6 SR10 supports TLS 1.2.
Published May 9, 2019 - Updated October 8, 2020
Have a question? Get answers now.
Visit the Collaboration Center to ask questions, engage in discussions, share ideas, and help others.