KB Article #182775

Unable to create valid SSL session

Problem

When trying to connect to our partner we are getting the below error:

com.cyclonecommerce.tradingengine.transport.UnableToConnectException: Error connecting to HTTP server test.axway.com/192.168.0.1:4080, timeout=30s (30,000ms); com.cyclonecommerce.tradingengine.transport.UnableToConnectException: Error connecting securely to test.axway.com; java.security.GeneralSecurityException: Unable to create a valid SSL session

Resolution

This error happens when we are not able to validate the partners SSL certificate. We would need to obtain the SSL certificate from the partner, we can try to load it from the a browser, or we can try to load it using openssl

METHOD 1

From the browser you would navigate to the HTTPS URL you are trying to connect to and on the left hand corner of the address bar you should see a padlock.

Click on the padlock and click on "your connection is secure"

Next, on the top right-hand corner of the popup, next to the X you will see a certificate image. Click on that and navigate to the details tab

At the bottom of that, you can click on export and save the certificate to your system. Please ensure the full chain is included if not you can open the certificate in windows and go to details, copy to file, click next on the wizard and select format P7b with option to include all certificates in path.

METHOD 2

Use openssl to download certificate using the following command

Openssl s_client -connect <hostname>:<port> -showcerts

From there all the certs will be printed out and you can copy from -----BEGIN CERTIFICATE----- to -----END CERTIFICATE-----

Save each cert to a different file and save as Cert1.cer, cert2.cer, etc

Root will be the first, intermediate will be the second, leaf should be the third


FINAL STEP

Once you have the SSL certificates just load them into the partner profile and trust them as SSL certificates. Once that is complete please test the connection to your partner again. if you are still having issues please open a support case