AWS AFX Connector "SSLHandshakeException: Could not generate secret" error in RSA Governance & Lifecycle
Last Modified: 2024-04-22
Article Number
Applies To
- Securid Governance & Lifecycle 7.5.2
- RSA Governance & Lifecycle 8.0.0
Issue
2024-02-30 16:15:12.064 [ERROR] com.aveksa.AFX.server.runtime.esb.amazonaws.esb.AmazonAWSComponent:361 - Unable to execute HTTP request: Could not generate secret com.amazonaws.SdkClientException: Unable to execute HTTP request: Could not generate secret ... Caused by: javax.net.ssl.SSLHandshakeException: Could not generate secret at sun.security.ssl.ECDHKeyExchange$ECDHEKAKeyDerivation.t13DeriveKey(ECDHKeyExchange.java:479)
Cause
Resolution
- RSA Governance & Lifecycle 8.0.0 P02
Workaround
In the following version
- Securid Governance & Lifecycle 7.5.2
Edit the /home/oracle/AFX/esb/conf/wrapper.conf
At line 31 in wrapper.conf insert the following line.
wrapper.java.additional.11=-Djdk.tls.client.protocols=TLSv1.2
Restart AFX for the changes to take effect.
This modification must be done if you patch 7.5.2 or redeploy a new AFX instance on 7.5.2
(Customers on 8.0.0 version should patch to the latest patch.)
Related Articles
AWS Amazon Cognito - SAML My Page SSO Configuration - RSA Ready Implementation Guide 4Number of Views AWS IAM Identity Center S3 - SAML Relying Party Configuration - RSA Ready Implementation Guide 4Number of Views Amazon AWS Account Collector fails with 'java.lang.NoClassDefFoundError' on WebSphere in RSA Identity Governance & Lifecycle 54Number of Views AWS Amazon Cognito - RSA Ready Implementation Guide 6Number of Views AWS IAM Identity Center S3 - SAML My Page SSO Configuration - RSA Ready Implementation Guide 25Number of Views
Trending Articles
RSA MFA Agent 2.5 for Microsoft Windows Installation and Administration Guide Download RSA SecurID Access Cloud User Event audit logs using Cloud Administration REST API CLU RSA Authentication Manager 8.9 Patches and Hotfixes Readme How to set up the REST RSA SecurID Authentication API for Authentication Manager 8.2 SP1 Download RSA SecurID Access Cloud Administration audit logs using Cloud Administration REST API CLU
Don't see what you're looking for?