IBM Support

javax.net.ssl.SSLHandshakeException error in RPE when pulling data from CLM

Technote (troubleshooting)


Problem(Abstract)

Receiving a javax.net.ssl.SSLHandshakeException: Received fatal alert: handshake_failure error in IBM Rational Publishing Engine (RPE) when attempting to download a schema or generate a document from applications in the IBM Rational Collaborative Lifecycle Management (CLM) suite.

Symptom

In the rpe.log file, you may see an error like the one below:


javax.net.ssl.SSLHandshakeException: Received fatal alert: handshake_failure
com.ibm.rational.rpe.common.utils.conn.ConnectionException: javax.net.ssl.SSLHandshakeException: Received fatal alert: handshake_failure
...
Caused by: javax.net.ssl.SSLHandshakeException: Received fatal alert: handshake_failure
at com.ibm.jsse2.j.a(j.java:16)
at com.ibm.jsse2.j.a(j.java:32)
at com.ibm.jsse2.qc.b(qc.java:790)
at com.ibm.jsse2.qc.a(qc.java:88)
at com.ibm.jsse2.qc.h(qc.java:380)
at com.ibm.jsse2.qc.a(qc.java:589)
at com.ibm.jsse2.qc.startHandshake(qc.java:389)
...


Cause

The CLM environment is configured with an IBM HTTP Server (IHS) reverse proxy and none of the ciphers included in IHS configuration are supported by RPE.


Diagnosing the problem

Check the IHS logs. In the error.log, you'll see an entry that says:

SSL0222W: SSL Handshake Failed, No ciphers specified (no shared ciphers or no shared protocols)


Resolving the problem

In the IHS httpd.conf file, ensure that the following ciphers are listed:



TLS_RSA_WITH_AES_128_CBC_SHA (cipher shortname is 2F)
TLS_RSA_WITH_AES_128_CBC_SHA256 (cipher shortname is 3C)

Document information

More support for: Rational Publishing Engine
Integrations: IBM

Software version: 2.1.2

Operating system(s): Linux, Windows

Reference #: 2007595

Modified date: 11 September 2017