Recently we have installed new Tibco certificate with TLS1.0 for Tibco BW v5.10 and getting error

[Amit Gadgil]

There is a issue while connecting from Tibco BW v5.10 to Apache v2.4.3 over SSL Cert with SHA256+RSA Cypher and TLSv1.0 Protocol. However while SSL Handshake between Tibco and Apache we are getting below error. Can you please confirm if this cert cypher will be supported by Tibco BW 5.10

validating certificate chain

looking in datastore for certificate with DN CN=Vodafone Internal CA, O=Vodafone Group, C=GB

match found

looking in datastore for certificate with DN CN=Vodafone Internal Root CA, O=Vodafone Group, C=GB

match found

chain length: 3

chain verifies ok

SetSubscrNetworkPrefStatus1, READ: TLSv1 Handshake, length = 781

*** Diffie-Hellman ServerKeyExchange

DH Modulus: { 255, 255, 255, 255, 255, 255, 255, 255, 201, 15, 218, 162, 33, 104, 194, 52, 196, 198, 98, 139, 128, 220, 28, 209, 41, 2, 78, 8, 138, 103, 204, 116, 2, 11, 190, 166, 59, 19, 155, 34, 81, 74, 8, 121, 142, 52, 4, 221, 239, 149, 25, 179, 205, 58, 67, 27, 48}

DH Base: { 2 }

Server DH Public Key: { 230, 132, 88, 66, 154, 213, 175, 51, 57, 41, 255, 24, 136, 2, 174, 190, 240, 1, 249, 243, 165, 85, 196, 152, 62, 117, 162, 193, 37, 202, 100, 212, 177, 19, 3, 98, 237, 227, 228, 2, 105, 127, 195, 174, 111, 32, 120, 126, 42, 198, 126, 113, 235, }

Anonymous

SetSubscrNetworkPrefStatus1, handling exception: java.lang.RuntimeException: Could not generate DH keypair

SetSubscrNetworkPrefStatus1, SEND TLSv1 ALERT: fatal, description = internal_error

SetSubscrNetworkPrefStatus1, WRITE: TLSv1 Alert, length = 2

SetSubscrNetworkPrefStatus1, called closeSocket()

[Abdul Kader Jailani Haja mohideen 3]

Check if you have any of these below properties in your bwengine.tra ,if so please remove them and try.

 

java.property.TIBCO_SECURITY_VENDOR=j2se

java.property.jdk.tls.client.protocols=TLSv1.2