AWI - Websphere - SSL_HANDSHAKE failed

Products

• CA Automic Workload Automation - Automation Engine

Issue/Introduction

After configuring HTTPS for the JCP on Websphere, a login to the system is not possible - the error message tells that no JCPs are available.

In the AWI logs messages can be found that the SSL handshake failed but with no details why.

When using an AWI with the same version on Tomcat it works flawlessly. 

Environment

Release : 12.3

Component : AUTOMATION ENGINE

Cause

Websphere configuration issue.

Resolution

we managed to solve the issue.

The root cause here is that JCP only allows TLS 1.2 and 1.3. Websphere tries with TLS 1.1 only.

On the Websphere JVM you need to set: -Dcom.ibm.jsse2.overrideDefaultTLS=true