How to Fix the SSLProtocolException: handshake alert

You might have probably encountered the following error when invoking a web service over HTTPs transport using SoapRequestReply activity.

"javax.net.ssl.SSLProtocolException: handshake alert:  unrecognized_name"

This could be a weird error especially if you know that the client certificates are valid, and you have installed the complete certificate chain in your keystore. In order to resolve this, you need to add the following property in the application .TRA file.

java.property.jsse.enableSNIExtension=false

I don't have an exact explanation for the root cause of this error, but I believe this is brought about by one of the the security enhancements in Java SE 7.

"Server Name Indication (SNI) for JSSE client: The Java SE 7 release supports the Server Name Indication (SNI) extension in the JSSE client. SNI is described in RFC4366. This enables TLS clients to connect to virtual servers."

Comments

  1. Hi Thanks so much, this piece of info helped me with an issue I've been struggling with

    ReplyDelete
  2. The information which you have provided in this blog is really useful to everyone. Thanks for sharing.
    TIBCO BWCE training in hyderabad

    ReplyDelete

Post a Comment

Popular posts from this blog

XML Schema and JSON Schema Validation in Mule 4

Parsing a JSON String and Converting it to XML in TIBCO

Using XML To Java in TIBCO BW