iaik.security.ssl.SSLException: Peer sent alert: Alert Fatal: protocol version

[Ravi Evuri 3]

We are trying to connect peolesoft with TLS 1.2 and SSLv3 protocols,but from TIBCO BW 5.11 designer vesrion and TRA 5.8 we are getting this below error.Any one can help us to resolve the issue.

My basic doubt is like whether 5.11 designer supports TLS 1.2 or not

 

iaik.security.ssl.SSLException: Peer sent alert: Alert Fatal: protocol version

at iaik.security.ssl.f.a(Unknown Source)

at iaik.security.ssl.g.f(Unknown Source)

at iaik.security.ssl.g.d(Unknown Source)

at iaik.security.ssl.f.c(Unknown Source)

at iaik.security.ssl.SSLTransport.startHandshake(Unknown Source)

at iaik.security.ssl.SSLTransport.a(Unknown Source)

at iaik.security.ssl.SSLTransport.renegotiate(Unknown Source)

at iaik.security.ssl.SSLSocket.renegotiate(Unknown Source)

at com.tibco.security.ssl.super.o0OO.doHandshake(SSLClientImpl.java:366)

at com.tibco.plugin.share.security.TIBCryptClientSocketFactory.createSocket(Unknown Source)

at com.tibco.plugin.share.security.TIBCryptClientSocketFactory.createSocket(Unknown Source)

at org.apache.commons.httpclient.HttpConnection.open(HttpConnection.java:706)

at org.apache.commons.httpclient.HttpMethodDirector.executeWithRetry(HttpMethodDirector.java:386)

at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(HttpMethodDirector.java:170)

at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:396)

at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:324)

at com.tibco.plugin.share.http.client.JakartaHttpTransportDriver$RequestExecutor.run(Unknown Source)

at com.tibco.pe.util.ThreadPool$ThreadPoolThread.run(Unknown Source)

[Dylan Ma 3]

Hi Ravi,

 

We are encountering a similar issue in TIBCO BW 5.12.  Was there a solution provided to your inquiry above or did you manage to find a workaround  If so, I would be very interested in hearing these details. Thank you.

 

-Dylan

[Ravi Evuri 2]

Hi Dylan,

Onlly 5.13 version will support TLS 1.2 and SSLv3 protocols version.Work around is need to upgrade your designer version to support TLS 1.2 version.

In our case instead of using webservice with certificates, we have changed the solution implementation with SFTP (File Transfer Protocol) to put the files in requested server.