Received fatal alert: handshake_failure

[htczbek]

Dear all,

We are recieving errors after backed system was changed like virtual server on load balancer works as double certificate SNI. Our apigee edge version is 4.15.07 on premise. We enabled SNI via "jsse.enableSNIExtension=true" code . But the problem was not resolved.

Problem is "503 service unavaible, Received fatal alert: handshake_failure"

We've also have the following to our HTTPTargetConnection

<SSLInfo><Enabled>true</Enabled><Protocol>TLSv1.2</Protocol></Protocols></SSLInfo>

Is there someting we missing?

[#2]

Please configure target server as below.

<TargetServer  name="TargetServer 1">    
    <IsEnabled>true</IsEnabled>
    <Host>www.example.com</Host>           <Port>443</Port>
    <SSLInfo> 
      <Ciphers/>   
     <ClientAuthEnabled>true</ClientAuthEnabled>   
     <Enabled>true</Enabled>        <IgnoreValidationErrors>false</IgnoreValidationErrors>  
      <KeyAlias>keystore-alias</KeyAlias>   
     <KeyStore>keystore-name</KeyStore>     
   <Protocols/>     
   <TrustStore>truststore-name</TrustStore>   
 </SSLInfo>
</TargetServer >

[dchiesa1]

4.15.07 ? You didn't ask me, but in my opinion you need to upgrade to 4.50.

[htczbek]

I learned that backed system changed chiper suits to TLS 1.2 -

TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,

TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256.

When I checked from https://docs.oracle.com/javase/8/docs/technotes/guides/security/SunProviders.html page that only jdk 8 supported this chiper suits. Our apigee edge version is 4.15.07 on premise and jdk 7.

Is our version supported jdk 8 .I couldn't find information about our version at https://docs.apigee.com/release/supported-software#apigeeedgecloud-javajdk.

Thank you,

[#5]

This version of Apigee is out of support now. I would suggest to upgrade to the latest or nearer version.