IBM Support

SSL Error when connecting to a HTTPS Server Adapter configured in IBM Sterling B2B Integrator

Troubleshooting


Problem

During connection attempts from a HTTPS Client to a HTTPS Server adapter configured in IBM Sterling B2B Integrator, the following errors are obtained by the HTTPS Client: "OpenSSL: error:140920E3:SSL routines:SSL3_GET_SERVER_HELLO:parsetlsext" or "OpenSSL: error:read server helloB: parse tlsext"

Diagnosing The Problem

The HTTPS Client is adding the hostname of the HTTPS Server to the Server Name Indication (SNI) field, a parameter that ISBI versions 5.2.4.1 and below do not support.

Communication Protocol tools like "wget" add the hostname parameter to the Server Name Indication (SNI) field, when trying to reach the HTTPS Server using its hostname instead of its IP address.

Resolving The Problem

When trying to connect with IBM Sterling B2B Integrator versions 5.2.4.1 and below make sure that the HTTPS Client does not add the hostname of the HTTPS Server to the Server Name Indication (SNI) field used during the SSL Handshake.

A workaround for Communication Protocol Tools like "wget" would be to enter the IP address instead of the hostname of the HTTPS Server in the wget command.

[{"Product":{"code":"SS3JSW","label":"IBM Sterling B2B Integrator"},"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Component":"--","Platform":[{"code":"PF002","label":"AIX"},{"code":"PF016","label":"Linux"},{"code":"PF027","label":"Solaris"},{"code":"PF033","label":"Windows"}],"Version":"5.2.4;5.2.3","Edition":"","Line of Business":{"code":"LOB59","label":"Sustainability Software"}}]

Document Information

Modified date:
16 June 2018

UID

swg21984410

Page Feedback