"SSL client handshake completion failure" in errored sessions

Products

• ProxySG Software - SGOS

Issue/Introduction

 www.example.com:443 - - - REQMOD: inactive RESPMOD: inactive 1.1 days 174 0 n/a - - - P BM (D) Explicit HTTP SSL SSL(error) : "SSL client handshake completion failure"    0 sec
 

Resolution

Application will by default try to connect over port 443. The site does not provide a server certificate, which is required for the ssl proxy to work.

Disabling server certificate validation can be used to stop this error occurring . Alternatively disable ssl proxy for this site.

To disable server certificate validation

<ssl>
    server.certificate.validate(no)

 

You would of course make this more granular so that you only disable certificate validation for this site.