Troubleshooting SSL Handshake Exceptions when Connecting to OS/400 Endpoints - Identity Manager

Products

• CA Identity Manager
• CA Identity Suite

Issue/Introduction

When attempting to create or connect to an OS/400 endpoint in Identity Manager, users may encounter a javax.net.ssl.SSLHandshakeException: Received fatal alert: no_certificate error. This issue occurs when modern security protocols in the Java environment conflict with the endpoint's TLS configuration.

Environment

Identity Manager 14.5

Cause

The error occurs because specific ciphers (typically ECDH and ECDHE) are disabled by default in the java.security configuration file. These protocols are required for the JCS (Java Connector Server) to establish a secure handshake with the OS/400 endpoint.

Resolution

1. Navigate to the java.security file on the server hosting the JCS.
2. Locate the section listing disabled ciphers.
3. Remove the references to ECDH and ECDHE ciphers.
4. Save the file.
5. Restart the JCS service for the changes to take effect.
6. Attempt the connection to the OS/400 endpoint again to verify the resolution.

Additional Information

See, this section of the documentation look for the heading Platform Level TLS Protocol Setting for JCS

Further information about OS/400 endpoint can be found in the IBM Connectors

To speak with a customer representative or a Support Engineer see Contact Support. Scroll to the bottom of the page and click on your respective region.