AWS AFX Connector "SSLHandshakeException: Could not generate secret" error in RSA Governance & Lifecycle
Article Number
Applies To
- Securid Governance & Lifecycle 7.5.2
- RSA Governance & Lifecycle 8.0.0
Issue
2024-02-30 16:15:12.064 [ERROR] com.aveksa.AFX.server.runtime.esb.amazonaws.esb.AmazonAWSComponent:361 - Unable to execute HTTP request: Could not generate secret com.amazonaws.SdkClientException: Unable to execute HTTP request: Could not generate secret ... Caused by: javax.net.ssl.SSLHandshakeException: Could not generate secret at sun.security.ssl.ECDHKeyExchange$ECDHEKAKeyDerivation.t13DeriveKey(ECDHKeyExchange.java:479)
Cause
Resolution
- RSA Governance & Lifecycle 8.0.0 P02
Workaround
In the following version
- Securid Governance & Lifecycle 7.5.2
Edit the /home/oracle/AFX/esb/conf/wrapper.conf
At line 31 in wrapper.conf insert the following line.
wrapper.java.additional.11=-Djdk.tls.client.protocols=TLSv1.2
Restart AFX for the changes to take effect.
This modification must be done if you patch 7.5.2 or redeploy a new AFX instance on 7.5.2
(Customers on 8.0.0 version should patch to the latest patch.)
Related Articles
AWS collector fails with NoClassDefFoundError Number of Views Amazon AWS Account Collector fails with 'java.lang.NoClassDefFoundError' on WebSphere in RSA Identity Governance & Lifecycle Number of Views AWS Workspaces - RSA Ready Implementation Guide Number of Views AWS IAM Identity Center CloudWatch - SAML My Page SSO Configuration - RSA Ready Implementation Guide Number of Views AWS IAM Identity Center- RSA Ready Implementation Guide Number of Views
Trending Articles
How to recover the Application and AFX after an unexpected database failure in RSA Identity Governance & Lifecycle Troubleshooting AFX Connector issues in RSA Identity Governance & Lifecycle RSA MFA Agent 2.3.6 for Microsoft Windows Installation and Administration Guide RSA Release Notes for RSA Authentication Manager 8.8 RSA Authentication Manager Upgrade Process
Don't see what you're looking for?
