KB Article #183170

The certificate-based login does not work when TLS 1.3 is enabled

Problem

After upgrading VA Server from 5.2 UP202206 Patch1 to 5.2 UP202401, the certificate-based login does not work anymore.


This error is shown in the SSL.log file:

SSL Library Error: error:0A000117:SSL routines::extension not received



Resolution

TLS 1.3 must be disabled in the webserver configuration file C:\ProgramData\Axway\VA\apache\conf\httpd.conf.


The configuration should look like:

SSLProtocol All -SSLv2 -SSLv3 -TLSv1 -TLSv1.1 -TLSv1.3


After changing the configuration, the VA admin service must be restarted.