topic Error: TJMsinput -SSL handshake -cipher suites are inappropriate in Talend Studio

Error: TJMsinput -SSL handshake -cipher suites are inappropriate

Anonymous — Tue, 09 Oct 2018 21:28:18 GMT

Hello Friends,

Can someone assist for the cipher suites are inappropriate error? I am using talend 6.3 and trying to setup tibco connectivity via SSL.

Client cert and CA cert have been defined properly. The same certs works for other ETL tools. I have no clue on the below error.

Starting job jms_ssl_conneectivity_cert at 16:03 08/10/2018.

[INFO ]: test1.jms_ssl_conneectivity_cert_0_1.jms_ssl_conneectivity_cert - TalendJob: 'jms_ssl_conneectivity_cert' - Start.
[statistics] connecting to socket on port 3454
[statistics] connected
[trace] connecting to socket on port 5069[trace] connected[DEBUG]: test1.jms_ssl_conneectivity_cert_0_1.jms_ssl_conneectivity_cert - tLibraryLoad_3 - Start to work.[DEBUG]: test1.jms_ssl_conneectivity_cert_0_1.jms_ssl_conneectivity_cert - tLibraryLoad_3 - Parameters:LIB

To see the whole post, download it here

Re: Error: TJMsinput -SSL handshake -cipher suites are inappropriate

Anonymous — Fri, 19 Oct 2018 07:37:20 GMT

Hello,

Are you using tSetKeyStore component as well configured? What's JDK version are you using?

Here is a stackoverflow article about:

https://stackoverflow.com/questions/28236091/how-to-enable-ssl-3-in-java

Best regards

Sabrina

Re: Error: TJMsinput -SSL handshake -cipher suites are inappropriate

Anonymous — Tue, 06 Nov 2018 20:55:17 GMT

Finally we found resolution . The issue was with java “JRE - jre1.8.0_181” version where java.security file has “jdk.tls.disabledAlgorithms” parameter enabled. When we disable that parameter the connection was successful. If you are using lower version of “JRE”, it works fine. So this is particularly to Java version we were using.

Error-“main, handling exception: javax.net.ssl.SSLHandshakeException: No appropriate protocol (protocol is disabled or cipher suites are inappropriate)”

Disabled

#jdk.tls.disabledAlgorithms=SSLv3, TLSv1, DES, DESede, RC4, MD5withRSA, DH keySize < 1024