Router assertion failing

Products

• CA API Gateway

Issue/Introduction

Router assertions reporting timeout in the SSG log to the backend server after upgrade the gateway

SSG log

2025-01-28T11:05:29.579-0500 WARNING 381  com.l7tech.server.policy.assertion.ServerHttpRoutingAssertion: 4042: Problem routing to https://<host_name:<ssl_port>/Resource. Error msg: Unable to obtain HTTP response from https://<host_name>:<ssl_port>/Resource: Connect to <host_name>:<ssl_port> timed out

 

Environment

Gateway 11.1

Cause

Customer's backend server was expecting cipher TLS_RSA_WITH_AES_256_CBC_SHA256

This cipher is listed in the release notes as being deprecated/disabled 

Gateway 11.1 release notes for more info

https://techdocs.broadcom.com/us/en/ca-enterprise-software/layer7-api-management/api-gateway/11-1/release-notes.html

Resolution

Modify the route to the backend and enable the specific cipher needed