Salesforce

Using OpenEdge 11.6.0 and getting error: Secure Socket Layer (SSL) failure. error code 28930: SSL routines (9318)

« Go Back

Information

 
TitleUsing OpenEdge 11.6.0 and getting error: Secure Socket Layer (SSL) failure. error code 28930: SSL routines (9318)
URL NameUsing-OpenEdge-11-6-0-and-getting-error-Secure-Socket-Layer-SSL-failure-error-code-28930-SSL-routines-9318
Article Number000182739
EnvironmentProduct: OpenEdge
Version: 11.6
OS: All Supported Platforms
Question/Problem Description

When trying to execute methods on a secure SOAP Web Service using OpenEdge 11.6, the following errors are returned:

Secure Socket Layer (SSL) failure. error code 28930: SSL routines (9318)
Connection failure for host <hostname> port 443 transport HTTPS. (9407)
Error sending Web Service Request: Fatal Error: connect operation failed (WinSock reported error=0)
 
Steps to Reproduce
Clarifying Information
Error MessageSecure Socket Layer (SSL) failure. error code <err_number>: <ssl_error_message> (9318)
Connection failure for host <host_name> port <port> transport <transport_name>. (9407)
Error sending Web Service Request: (11767)
Defect NumberDefect PSC00344081
Enhancement Number
Cause

There are some SOAP service providers configured with protocol TLSv1 & cipher AES128-SHA, however 11.6 uses protocol TLSv1.2 and cipher AES128-SHA256 by default, excluding other protocols and ciphers at the connection level.
 
Resolution

None at this time.
 
Workaround

To workaround this problem, use either the -sslSOAPProtocols and -sslSOAPCiphers connection parameters when connecting to the Web Service, or use the below environment variables can be used to set both protocols(TLSv1.2 & TLSv1) and ciphers (AES128-SHA & AES128-SHA256) on the ABL client side.

Parameters:
-sslSOAPProtocols TLSv1.2,TLSv1.1
-sslSOAPCiphers AES128-SHA,AES128-SHA256

For example:
hWebService:CONNECT("-WSDL <wsdl_url> -sslSOAPProtocols TLSv1.2,TLSv1 -sslSOAPCiphers AES128-SHA,AES128-SHA256").

Environment Variables:
If you are using windows then

PSC_SSLCLIENT_CIPHERS=AES128-SHA,AES128-SHA256
PSC_SSLCLIENT_PROTOCOLS=TLSv1.2,TLSv1 

Note: TLSv1.2 should be specified first
 
Notes
Keyword Phrase
Last Modified Date1/4/2016 7:00 PM

Powered by