Service Virtualization

  • 1.  Tomcat Connects to LISA -  SSL Server error

    Posted Sep 22, 2016 03:15 PM

    Hi,

     

    we have developed few API based Virtual Services .. these VS are consumed by front end based  orchestration services which are hosted on tomcat server.. 

     

    we often see the below ssl sever error in tomcat server and sometime it works.. Since the code is working fine in Live system.. our developer wants validate on LISA side.. 

     

    can you please suggest if any changes needs to be done LISA Server side ?  (

     

     

    javax.net.ssl.SSLHandshakeException: server certificate change is restrictedduring renegotiation



  • 2.  Re: Tomcat Connects to LISA -  SSL Server error

    Posted Sep 23, 2016 11:20 AM

    I do not have a definitive answer; however, does this link help at all?

    tomcat - What means "javax.net.ssl.SSLHandshakeException: server certificate change is restrictedduring renegotiation" a…  

    The issue you describe combined with the commentary in the above link makes me wonder if you could use TLSv1, v2 to solve this error?  There have been some previous posts where adding a directive to the JVM has helped with HTTPS.  If you are already using these settings, please disregard.  The Communities link that sheds a bit of light on TLS is located here:

    https://communities.ca.com/message/241890488?commentID=241890488#comment-241890488  



  • 3.  Re: Tomcat Connects to LISA -  SSL Server error

    Posted Sep 23, 2016 04:23 PM

    Thanks for the help.. 

     

    do you mean that we need to use the TLS version same as client .. ?

     

    if so the link u mentioned shows that needs to be updated servicemanager.vmoptions ..is it on lisa client side or server side ? also are we not required to update in vsemanager.vmoptions or anywhere else ?



  • 4.  Re: Tomcat Connects to LISA -  SSL Server error
    Best Answer

    Posted Sep 23, 2016 04:51 PM

    Sorry, the reference to the link was discussing a specific override to SI Manager.  

    This thread: https://communities.ca.com/message/241875210?commentID=241875210#comment-241875210 indicates using https.protocols=TLSv1.2,TLSv1.1 as a property setting in the local.properties file.  

    I don't know for certain that disabling SSL in favor of TLS will work. And, the link is not clear if this is *https.protocol* or *https.protocols*