Aria Automation or Orchestrator Rest api calls fail with "The request was aborted: Could not create SSL/TLS secure channel." error

Products

• VMware Aria Suite

Issue/Introduction

Symptoms:

• Aria Automation or Orchestrator Rest api calls fail with an error similar to:

 "The request was aborted: Could not create SSL/TLS secure channel."

• This issue can occur when the client server submitting the request does not support any common ciphers with the Aria Automation servers. At time of writing the list of Ciphers supported by Aria Automation are as follows:

"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384",
"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384",
"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256",
"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256",
"TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305",
"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305"

• The supported ciphers can be validated by viewing the content of the /opt/charts/ingress-ctl/values.yaml file under the ciphersuites section

Environment

VMware vRealize Orchestrator 8.x
VMware Aria Automation 8.12.x

Cause

SSL errors will occur when the client and server do not share a common set of cipher suites.

Resolution

To resolve the issue enable the cipher suites supported by Aria Automation outlined above on your client server that is submitting the api request.

You would need to contact the relative operating system vendor for the relevant steps on how to include the additional cipher suites.

Additional Information

Impact/Risks:
Rest api calls and other https requests may fail with an SSL channel error.