REST Message Giving SSL Error

StephenHey
Mega Guru

Trying to make a REST call to an HTTPS endpoint directly (not through a MID server), but receiving an error:

javax.net.ssl.SSLHandshakeException: Remote host closed connection during handshake

Any ideas?

1 ACCEPTED SOLUTION

Our REST endpoint did not accept anything lower than TLS 1.0 encryption.   Service-now REST tries to use "SSLv2 Hello" to ask what kind of encryption the server side requires.   However, our endpoint rejects even the "Hello" per security standards.   The reason Service-now does this is because that connection logic is done by the version of Java that Service-now runs on.   Our instance was running on Java 1.6 which uses that SSLv2 Hello method.



The fix was to have Service-now upgrade our instances from 1.6 to 1.8.



The first thing I'd check, Deepak, is to see if your endpoint accepts SSLv2 Hello.   If it does not, then this would be your problem.


View solution in original post

7 REPLIES 7

dagarwal82
Tera Contributor

I am having the same issue. Did you manage to solve this out.


Our REST endpoint did not accept anything lower than TLS 1.0 encryption.   Service-now REST tries to use "SSLv2 Hello" to ask what kind of encryption the server side requires.   However, our endpoint rejects even the "Hello" per security standards.   The reason Service-now does this is because that connection logic is done by the version of Java that Service-now runs on.   Our instance was running on Java 1.6 which uses that SSLv2 Hello method.



The fix was to have Service-now upgrade our instances from 1.6 to 1.8.



The first thing I'd check, Deepak, is to see if your endpoint accepts SSLv2 Hello.   If it does not, then this would be your problem.


ghaing
Giga Expert

Hi,


You have to generate the server certificate and upload it into service-now repository :


Take a look: http://wiki.servicenow.com/index.php?title=Uploading_a_Certificate



Regards,


dagarwal82
Tera Contributor

Awesome guys. Our endpoint is running on TLS1.0 , gonna try with SSLV2. I really appreciate the quick replies.



Thanks!