Unable to access the proxy's Java web management console due to TLSv1.0.

Products

• ProxySG Software - SGOS

Issue/Introduction

User getting an error when trying to access the proxy's Java web management console on port 8082 on a browser.

Below is the screen shot of the error.

The client is running Java version 8 and just updated to 'Update 291'. It might affect later 'Update' version where Java no longer support TLSv1.0.

Environment

Release : 6.7 and 7.x

Component : SSL

Cause

On the Java error 'Details', under the 'Wrapped exception' tab, it contains the following error log:

javax.net.ssl.SSLHandshakeException: The server selected protocol version TLS10 is not accepted by client preferences [TLS12]

The issue is because the Java client no longer support TLSv1.0 and would need to use TLSv1.0 but the proxy only support TLSV1.0.

Resolution

Enable TLSv1.2 on the proxy's HTTPS-Console management service.

Go to Configuration > Services > Management Services > Edit the 'HTTPS-Console' service and checked the SSL protocols version of TLSV1.2 or later.